Educational C2 framework in Python - from-scratch RSA + AES, custom protocol, over raw sockets and HTTP tunneling. - nissimelfax/python-c2-framework

Android LPE (CVE-2026-98260) on Honor MagicPad3 Pro 13.3 (YLP-W00), kernel 6.12.38 — PoC/EXP, uid-0 shell, KernelSU app - woshigenm/CVE-2026-98260

PoC / exploit archive for CVE-2026-109618. Contribute to piecar21/CVE-2026-109618 development by creating an account on GitHub.

Docker lab + narrated walkthrough for a PHP ASLR-bypass RCE PoC, and a Claude Code skill that verifies whether a downloaded memory-corruption exploit genuinely leaks its coordinates or hardcodes th...

Burp suite extension which help you to find inconsistency between content-type header and body parsers - Over-Flowy/TypeXplorer

Read-only vulnerability scanner for lockfiles, GitHub repositories and this machine's runtimes. Matches locally with OSV; lists what it scanned, what it found and what it could not read. - ...

Python-based basic vulnerability scanner with Flask dashboard - Gokulkrishna-create-reg/vulnerability-scanner

Universal container escape exploit targeting the CRIU container checkpoint/restore system - CVE-2026-18107 - robalb/criu-exploit

A HTTP-based Command-and-Control (C2) framework for Offensive Cybersecurity - RandomChugokujin/CruxC2-Go

ycode 自动化渗透（月落 YUELuo）— ARTEX 0.3.23 月落二开版：AI 自主渗透测试平台，打点绕防 / 内网纵深 / Windows 域攻击 / 报告自动化。仅供授权测试与学习研究。 - 2561769445/ycode-auto-pentest

Contribute to huydapoet/CodeBlog-XSS-Demo development by creating an account on GitHub.

Contribute to hack-ita/xss-internal-exfil-poc development by creating an account on GitHub.

Avaliação prática de segurança ofensiva (OWASP A10: SSRF) aplicada à infraestrutura da Clínica MediCare Diagnósticos - UNINOVE. - CarlosPiinho/owasp-ssrf-medicare-security-assessment

影视仓接口助手 Android 原生正式版：全网搜寻 / 单多仓递归展开 / 四层多线程池极速测速 / 图片隐写与AES解密 / SSRF安全加固 - yz8023/ysc-helper-android

Exploit-based root for Sonim X320 (CVE-2024-43047) - JMTDI/sonim-x320-root

CVE-2026-109619 (PHP2Shell): Pre-Auth Remote Code Execution (RCE) via PHP-FPM Stale Global State Deserialization UAF. Reproducible Docker lab, interactive shell, reverse shell & WAF/IDS rul...

First-line SOC triage on a Windows domain: ManageEngine SIEM and LimaCharlie EDR, false positives dismissed, incidents escalated, broken alert rules found and fixed - IshSoundankar/soc-siem-edr-lab

This is a Exploit Code For CVE-2021-3560 - Polkit Privilege Escalation Develop using Bash Language. - AntorDOS/CVE-2021-3560-Polkit-Privesc-Exploit

I created new methods to bypass sandbox in Chat GPT - GitMaxer/gptbypass

• Detailed write-ups and PoC documentation for PortSwigger Web Security Academy and TryHackMe labs (SQLi, XSS, IDOR, etc.). - ismayilhadisov/Web-Security-Academy-Writeups

Automated YARA Rule Generation and Testing Tool for Static Malware Analysis - 5399658-ui/yaraforge1