A comprehensive web application penetration testing report and source code analysis evaluating Stored and Reflected XSS vulnerabilities across multiple security tiers using DVWA. - 10HUM/Web-Applic...

A lightweight Command & Control (C2) framework specialized for Windows environments, designed for Red Team operations and post-exploitation research. - DevCop95/pullgoscript

Open-source Kubernetes vulnerability scanner: an SBOM of every running image, matched against OSV and ranked by CVSS, EPSS and CISA KEV. Self-host with one Helm chart, or use the cloud. - lockdep/s...

Fast, deterministic PHP vulnerability scanner in Rust: type inference, taint rules, CWE/OWASP-tagged findings. - MisterIcy/bleedthrough

A console-based web vulnerability scanner that iterates through endpoints using a dictionary, checks for Reflected XSS and SQL injections - Wakanda1519/GoSecScan

Comprehensive static and dynamic analysis of a 32-bit Windows malware. Features MPRESS unpacking, API hashing evasion, shellcode injection, and C2 protocol reverse engineering. - AndreLanza1/Malwar...

POC for Nextjs use cache and React, GHSA-673q-mjm6-r5xr - hashseclb/nextjs-use-cache-rce-2026

基于 CVE-43499 的面向 iQOO Neo10 Pro+ 及同芯片 iQOO 设备的锁屏界面自动提权工具 - Escosis/V2463A-LPE

Audit the MCP fetch tool as a cloud-metadata exfil path: version pins + 169.254.169.254 egress (stdlib only) - Iceman2050/mcp-fetch-ssrf-auditor

Mastercard Developer Hub for FDX APIs — independent third-party profile of a public API surface, by API Evangelist. The Financial Data Exchange (FDX) is a nonprofit industry standards body that cre...

Contribute to lwierzbicki/burp2api development by creating an account on GitHub.

一个能锁定Burp Suite标签页的插件，设计初衷就是为了解决Bp标签页拖出后关闭窗口标签页消失的问题，阻止标签被误拖出或重排，带中文控制页和实时命中计数。 - zelozi02/Tab-Lock

Static malware analysis & threat intelligence triage engine with explainable risk scoring (VT, MalwareBazaar, CIRCL, YARA). - anilkashyap01/Malvexis

Malware behaviour-analysis framework: static analysis, behaviour detectors, YARA, signature/RMM checks, an offline triage agent, and PDF reporting. - enriqueshr/behaviour-analysis-sandbox

执行一条命令，就能给一个包生成 0–100 分、A–F 级以及一句“还能不能用”结论的报告,，覆盖 6 个维度:维护活跃度, Issue 响应 PR 健康度 运行时/TFM 自身漏洞 / 依赖漏洞 一票否决(归档/废弃封顶 35、严重 CVE 封顶 40、无真人维护者封顶 45).支持 PyPI、npm、NuGet，也支持只扫描 GitHub 仓库；输出 4 种格式（终端彩色/Markdo...

Static vulnerability scanner with verified fixes - CLI + FastAPI dashboard - ortegageneve/vuln_finder_fixer

市场物品压价，钓鱼价格忽略，手机令牌确认，双重保险. Contribute to Gravity2000/steam- development by creating an account on GitHub.

POC for use cache NEXTjs RCE - GHSA-673q-mjm6-r5xr - Unauthenticated Remote Code Execution in `use cache` functions returning typed arrays - hashseclb/hashseclb-nextjs-use-cache-rce-2026

Community Event Board - AWS POC infrastructure (CloudFront/ALB/EC2, DynamoDB, S3+OAC) deployed via GitLab CI + CloudFormation - 7arrt/community-event-board-aws

Security research: unauthenticated LAN JS execution + persistent internal-API control on VIZIO OS / onn SmartCast TVs (65S4V4, W4K65M-1030). Full writeup + verified exploit chain. - vindeckyy/smart...

yara-rules for malware-detection. Contribute to Thengavar/my-yara-rules development by creating an account on GitHub.