YARA, network rules and a read-only Windows triage script for the freight-lure Node.js RAT and its BSC dead drop (GOOSE 20261020) - darkfibr/freight-rat-detections

Mercury unauth RCE combo: CVE-2026-111058 (kernels) + CVE-2026-111057 (terminals). By 0xNuts (@ExDev994). Authorized testing only. - ExDev994/CVE-2026-111058-CVE-2026-111057-mercury-rce

渗透测试不是扫清单，而是不断改变判断。灵眼是 DeepSeek Harness 的授权安全测试模式：探索图记录信念，证据约束结论，侦察、利用、复测与报告连成可复核的一条链。MIT。 - guaidao2/dsh-lingeye

Burp-style intercept (edit / forward / drop), HTTP history and repeater for testing your own web apps. - user-github-me/interceptor

Contribute to ZeroDayEvil/CVE-2026-50416-writeup-and-PoC development by creating an account on GitHub.

Security Researcher | Exploit Developer | PoC to Working Exploit - ponzidon/ponzidon

云安全中心收费吗：基础版免费0元，各版本价格、功能差别和4种容易多扣钱的情况. Contribute to acj67988/bit-content development by creating an account on GitHub.

NexShield is an AI-driven cybersecurity dashboard that automates network reconnaissance, identifies vulnerabilities across 27+ sensitive services, maps findings to MITRE ATT&CK techniques, ...

Reproducible lab for three Drupal core advisories affecting 11.4.9 (fixed in 11.4.10): SA-CORE-2026-014 RCE in field_ui, SA-CORE-2026-015 stored XSS in link, SA-CORE-2026-016 stored XSS in navigati...

Maintained by the ANY.RUN team, this repository provides YARA rules to help detect and classify various malware families and other malicious artifacts. - anyrun/YARA

CVE-2026-99999 Educational Analysis — Linux kernel csum_start validation bug, Guest-to-Host memory leak (CVSS 9.3). Attack chain simulation, no real exploit. - 01luyicheng/CVE-2026-99999-analysis

Sentinel is a Python-based vulnerability scanner that detects open ports, identifies software versions, checks HTTP security headers, performs basic CVE lookups using the NVD, and generates TXT and...

Isolated Active Directory attack lab: a purpose-built Windows domain with deliberate misconfigurations, attacked end-to-end — recon, credential attacks, RBCD, ADCS/ESC1, Sliver C2, persistence, DCS...

CVE-2026-99999 Working PoC — real VM escape for Linux kernel csum_start bug (CVSS 9.3). Guest-to-Host heap leak. See also: CVE-2026-99999-analysis (Educational). - 01luyicheng/CVE-2026-99999-exploit

Analysis of a .NET malware loader tagged as Agent Tesla: hidden image payload, Defender-exclusion behavior, ATT&CK mapping, and draft YARA rules. - Cyber-Sam01/agent-tesla-loader-analysis

Writeups for Blue Team CTF challenges. Contribute to axbubnov/CTF-BlueTeam-Writeups development by creating an account on GitHub.

应急响应排查助手 —— 单文件/零依赖/离线可跑的 Windows·Linux 入侵排查、日志分析、WebShell 查杀工具 - czfSaber/er_check

Static Application Security Testing (SAST) & Live CVE Dependency Scanner (SQLi, RCE, LFI, XSS, Secrets) mapped to OWASP Top 10 & CWE - PrattayDev/vulnguard-sast

Hands-on web application security testing using Burp Suite, DVWA, and Dirsearch. Practiced HTTP request interception, SQL Injection, Reflected XSS, and Stored XSS in a safe lab environment. Explore...

**Python-Based Vulnerability Scanner | Python, Flask, Socket, SSL, Requests, Linux/Kali Linux** Developing a Python-based security assessment tool featuring TCP port scanning, IP resolution, SSL/T...

A Python-based Web Vulnerability Scanner that identifies common web security issues, including missing security headers, insecure configurations, and exposed resources. It generates scan results to...