Official Enterprise Showcase & Executive Demonstration Portal for AUTHENTIX v2.1.0 - Burp Suite Montoya Security Suite - pratik-khairnar-sec/authentix-enterprise

Contribute to hhg69/CVE-2026-41875-EXPLOIT-QuickCart-one-click-Account-Takeover development by creating an account on GitHub.

针对于SRC漏洞报告的撰写，现在有的字段是京东、美团、快手三家，后续可以添加其他SRC字段. Contribute to do-whilefor/src-report development by creating an account on GitHub.

A minimal Windows shellcode runner written in Go - loads base64 shellcode from disk or a remote URL, decodes it in memory, and executes it via VirtualAlloc + CreateThread. For authorized pentests ...

Network Vulnerability Scanner developed for the ProStackHub Cyber Security Internship. - azka-code/ProStackHub_NetworkScanner

Contribute to gabrielhusa0-hash/Reflected-XSS-in-a-JavaScript-URL-with-some-characters-blocked development by creating an account on GitHub.

Static malware triage: magic-byte typing, entropy, strings/IOCs, pure-Python PE parser (sections, imports), YARA-style rules, capability vs evasion scoring. Validated on real Windows binaries. - Za...

CVE-2026-39987 Exploit | by infrar3d. Contribute to Industri4l-H3ll-Xpl0it3rs/CVE-2026-39987-Marimo-RCE development by creating an account on GitHub.

Software composition analysis for Python, npm and Composer: OSV.dev lookups, built-in CVSS 3.1 calculator, alias-aware dedup, branch-aware fix versions, CI policy gates and CycloneDX 1.5 SBOM expor...

A minimal Windows shellcode runner written in Go - loads base64 shellcode from disk or a remote URL, decodes it in memory, and executes it via VirtualAlloc + CreateThread. For authorized pentests ...

PoC and automated code to exploit CVE-2025-57819 in FreePBX. It demonstrates the Remote Code Execution (RCE) vulnerability via command injection in the Asterisk system. Ideal for HackTheBox environ...

Contribute to ylimme714/yara-malware-detector development by creating an account on GitHub.

Self-hosted, always-on external attack-surface monitoring. Finds dangling DNS, subdomain takeovers, expiring certificates and exposed services across Cloudflare, AWS and Kubernetes. Alerts via Aler...

Public security research for offsec teams, bug bounty hunters and researchers: source-backed disclosures, program policies, discovery listings, methodologies and diagrams, with structured JSON for ...

Contribute to gabrielhusa0-hash/Reflected-XSS-protected-by-CSP-with-CSP-bypass development by creating an account on GitHub.

Nacos 综合漏洞利用工具（重构版）. Contribute to gandli/NacosExploit development by creating an account on GitHub.

A Python-based web vulnerability scanner for security testing and reconnaissance - lekssayshamza/PySentinel

A lightweight SQL injection vulnerability scanner. Contribute to Counc/Sqlmap development by creating an account on GitHub.

CVE-2026-31857 - Craft CMS authenticated RCE timing verifier. - WhiteMachin3/CVE-2026-31857

面向嵌入式 C/C++ 的构建期 SBOM 工具，配一份社区共建的芯片 SDK 组件识别规则库。 识别被芯片原厂改名、魔改、静态链接后的开源组件（包括国产芯片 SDK 与国密库）， 生成 CycloneDX / SPDX 软件物料清单和 VEX，对照欧盟《网络弹性法案》（CRA）自查， 并起草 CRA 与工信部的漏洞报送材料。 - GANGMU-SBOM/gangmu

EspoCRM 9.3.3 - Authenticated SSRF via Alternative IPv4 Notation - EntroVyx/CVE-2026-33534