FilteredObjectInputStream allowlist bypass via java.rmi.MarshalledObject, auto-triggered during Log4jLogEvent deserialization, leading to unauthenticated RCE on serialized log receivers. - striga-a...

在主机疑似失陷、挖矿、被植入 Webshell/Rootkit、发生横向移动等场景下，60 个模块 **5 分钟内输出完整应急排查报告**（终端大屏 / 纯文本日志 / JSON 结构化 / HTML 可视化）。 - MindCatcher69/linux_ir

多引擎搜索结果钓鱼防护 Chrome 扩展 —— 自动标记并隐藏仿冒官网的钓鱼网站. Contribute to Lu-yanmo/phishshield development by creating an account on GitHub.

Lab keamanan siber berbasis Kali Linux & Docker dengan dukungan GUI—siap untuk belajar Nmap, Wireshark, Burp Suite, dan Metasploit secara terisolasi. 🛡️🐳 - yogaananda6677/workspace_cyber

PoC for CVE-2026-19632 - TranslatePress – Multilingual <= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link Disclosure - DeadExpl0it/CVE-2026-19632-POC

c&c. Contribute to rad0xus/c2 development by creating an account on GitHub.

A vulnerability scanner is a cybersecurity tool that checks computers, networks, websites, or applications for security weaknesses. It identifies issues like outdated software, weak passwords, misc...

High-performance, Nuclei-compatible vulnerability scanner written in Rust - dev-celestia/nuclei-run

Native Windows desktop app for PRD test-case generation and Jenkins deployment. Source-available for noncommercial use. - wiksongkim-arch/ForTest

Automated Vulnerability Scanner & Report Generator - Rashad351/vuln-scanner

POC pre-auth RCE on Sharepoint chain. Contribute to hypnguyen1209/CVE-2026-63520 development by creating an account on GitHub.

Check for CVE-2026-79266. A use-after-free in the DevTools component allows arbitrary code execution inside the sandbox via a malicious Chrome extension leveraging social engineering. - virologi-in...

Pre-auth RCE via FilteredObjectInputStream MarshalledObject bypass in Apache Log4j 2 - hypnguyen1209/log4j2-rce

exploit for Log4j2 (issue 4255). Contribute to joanbono/log4j2-4255-exploit development by creating an account on GitHub.

JFrog Ultimate Bundle POC — Curation, Xray, AppTrust, and Evidence end-to-end demo - marcelonyc/marcelo-ultimate-poc

OS command injection (CWE-78) in Yoshino-Yukitaro/imagemagick_mcp_server — advisory, detection and PoC. Repository archived upstream; no fix possible. - s1ko/mcp-imagemagick-rce

Sliver HTTP(S) C2 PNG bomb DoS exploit — GHSA-663m-7x7m-g4fw (CVE-2026-77622) - Squ1shification/PNGboomer-CVE-2026-77622

Poc CVE-2026-18080. Contribute to Polosss/By-Poloss..-..CVE-2026-18080 development by creating an account on GitHub.

Cerberus XSS by Sudeepa Wanigarathne is an advanced XSS testing tool for pentesters and bug bounty hunters. It features web crawling, WAF bypass, DOM-based XSS detection, and blind XSS logging. Wit...

Notebooklm criado para fins de estudo como parte do curso de cybersegurança dio.me com foco na segurança de sistemas web e estudo de ataques XSS e SQLInjection - rotinoM0/notebooklm-estudo-seguranc...

YellowKey BitLocker recovery - bitlocker yellowkey, yellowkey bitlocker, CVE-2026-45585, yellowkey github, yellowkey vulnerability, yellowkey CVE, TPM, BitLocker recovery key backup, Windows 10/11,...