Purple-team PoC: a Sliver C2 agent in QEMU with process-hiding via the Diamorphine LKM, built to test EDR/detection coverage. - inneromost/lurked

Malware scanner for container images: daemonless, layer-aware, ClamAV and YARA - movray/meles

Reproducible lab and network PoCs for HAProxy QUIC CVE-2026-26080 and CVE-2026-26081 - Zeerg/haproxy-quic-cves-2026

PoC: OpenShell release-canary workflow_run head_sha install.sh RCE - PDFtoMark/gab-poc-openshell-canary

poc workflow_run fork PR privileged RCE. Contribute to PDFtoMark/gab-poc-wfr-fork-pr development by creating an account on GitHub.

IOCs, YARA & Sigma rules and bilingual analysis of the "EaseUS Partition Master 2026" fake-crack campaign (Trojan.PavinLoader). No samples hosted. - fotedev/pavinloader-easeus-campaign

C/C++ AV engine with multi-method detection, plugged directly into the AkesoEDR kernel stack - derekxmartin/AkesoAV

A Python Flask security project exploring Cross-Site Scripting (XSS) prevention through context-aware encoding, HTML sanitization, CSP, secure headers, and DOM protection. Copy description - Alirez...

Contribute to 794pn2s6fh-hub/CVE-2026-112621- development by creating an account on GitHub.

OPPO A96 (PFUM10) post-relock toolkit: CVE-2026-43499 chain -> real BakaSU driver, ocsk kernel defense probes vs OPPO OPLUS_ROOT_CHECK, boot restore scripts - poisongod/BakaSU-PostLock

Weaponized CVE-2026-112396 (Pillow heap use-after-free): deterministic heap grooming, file-triggered chain, attacker-chosen post-free writes - verified PoCs, evidence, CI. Plus pypdf CVE-2026-11379...

Reverse-engineering writeup, YARA rules and IOCs for the Akuma Stealer MaaS infostealer (detection/intel only) - NotAlexei/akuma-stealer-analysis

Race trigger, heap-reuse oracle, pcap analysis, detection and mitigation tooling for CVE-2026-98432 (Linux IPv4/TCP ireq_opt use-after-free). - H1z3-br0/CVE-2026-98432

CVE-2026-98432 (Linux IPv4 TCP use-after-free): how to check your server, apply a stopgap, and clean up after the fix - mahdi-salmanzade/CVE-2026-98432

BoberProxy is a Burp Suite extension written in Jython - KZ5017/BoberProxy

crawler que identifica parâmetros que aceitam URLs, testa SSRF interno e tenta alcançar `169.254.169.254` (AWS/GCP/Azure). - carjkls/Scanner-de-SSRF-com-detec-o-de-cloud-metadata

A modern infrastructure control panel for managing Xray-powered VPN services. XMesh Nexus aims to provide a unified interface for VPN infrastructure management, with a focus on a clean enterprise-...

A network vulnerability scanner for identifying exposed services, missing patches, and misconfigurations. - Pobrien52/network-vulnerability-scanner

CTF source-code vulnerability scanner for Python, JS/Node, PHP, Go, Java, Ruby, Lua, and Rust — finds real exploitable bugs (SQLi, RCE, SSRF, IDOR, auth bypass, unsafe deserialization) with suggest...

Reflected XSS scanner that parses the real HTML/JS context a parameter reflects into and generates a payload for that exact syntax — then confirms real execution in a headless browser instead of gu...

Contribute to utatan3/DOM-Based-XSS-via-Clipboard-HTML-Paste-44429- development by creating an account on GitHub.