SSRF-safe fetch for Node.js: blocks private, loopback and cloud-metadata addresses, checked at connect time so DNS rebinding can't get around it. - amanjhacodes55/fetch-ssrf-guard

Detection and response package for php2shell (CVE-2026-109618 / CVE-2026-109619): Suricata, Zeek, YARA, Sigma, ModSecurity rules, hunting queries, SOC triage, patch matrix. No exploit code. - Cyphe...

High-confidence, zero-false-positive software supply chain & package guard powered by go-yara - cawalch/go-yara-supplychain

Antivirus et optimiseur gratuit pour Windows (v1.0). Interface WinUI 3, ClamAV et YARA. Aucun compte, aucune publicité, aucune télémétrie. - 1donatien0/optiCOMBAT

Free, open-source vulnerability scanning for small security teams: a self-hosted scanner that runs Nuclei templates, with triage and escalation built in. - goodnightsec/gn-check

Contribute to Masriyan/Exploit-CVE-2026-110264-GitLab-CE-EE-RCE development by creating an account on GitHub.

Offline evidence checker for NetScaler DTLS CVE-2026-88772. Per-vserver configuration and firmware assessment; standalone Python; no exploit payloads. - completetech-security/netscaler-cve-2026-887...

OpenAsy DAST agent: runs Nuclei and ZAP inside your network, only against targets proven to be yours, and sends the findings to dast. - openasy/dast-agent

Adversary Emulation Framework. Contribute to ACRT-EVAL/sliver-329-cr11 development by creating an account on GitHub.

Adversary Emulation Framework. Contribute to ACRT-EVAL/sliver-329-cr10 development by creating an account on GitHub.

Standalone defensive checker project for Sharp/librsvg CVE-2026-96889. One exploit per repository; evidence-based assessment without exploit payloads. - completetech-security/sharp-rsvg-rce-check

A Python-based Web Vulnerability Scanner developed as an individual B.Tech CSE academic project. It includes security checks for web application headers, cookies, input reflection, and database err...

Root RCE via authenticated OS command injection in the TP-Link Archer AXE300 ISP Speed Test (spdt_server -> sys.fork_call). Firmware 1.0.11. CWE-78, CVSS 8.5. - vindeckyy/tp-link-archer-axe3...

Standalone defensive checker project for CVE-2026-102258: SonicWall SMA1000 (6210, 7210, 8200v): AMC stored cross-site scripting. One exploit per repository; implementation pending. - completetech-...

Standalone defensive checker project for CVE-2026-102257: SonicWall SMA1000 (6210, 7210, 8200v): AMC archive path traversal. One exploit per repository; implementation pending. - completetech-secur...

Assemblyline 4 service that analyzes .NET and native binaries with Corvus: container contents, YARA matches, .NET and Il2Cpp outlines. - Albasha0x0/assemblyline-service-corvus

Lab logbooks for FSI (Fundamentos de Segurança Informática) @ FEUP, 3rd year. Covers Set-UID, buffer overflow, format string, XSS, crypto, hash length extension, PKI and packet sniffing/spoofing, m...

OSC is a Python web-security tool for authorized testing. A single scan covers secret detection (API keys, tokens, credentials), security audit (headers, CORS, TLS, cookies), endpoint discovery, an...

CVE-2026-111497 – Node.js Brotli Decoder OOB Write (CVSS 9.2) | Red/Blue Team suite for unpatched Node.js 22.x, 24.x, 26.x. 2 tools: Full Exploit (patch detection, remote DoS, Brotli bomb, lab RCE)...

FastAPI Network Vulnerability Scanner with Nmap & CVE Lookup - unidark001/network-vulnerability-scanner

Offline evidence checker for NetScaler CVE-2026-88771. Edition-aware firmware assessment, separate threat metadata, standalone Python, no exploit payloads. - completetech-security/netscaler-cve-202...