SaaS Shield - detect potential copying of your public website content and collect evidence. Node.js + SQLite, dependency-free, SSRF-hardened crawler, deterministic similarity engine, PWA-ready. - b...

Passive OSINT recon dashboard: parallel lookups on domains, IPs, emails and usernames with risk-ranked findings, live results and an SSRF guard. FastAPI. - BoraCristian/osint-dashboard

A vulnerability scanner. Contribute to tonny-the-great/VulnScanner development by creating an account on GitHub.

Contribute to GLORYmandapuram-12/Web-Application-Vulnerability-Scanner development by creating an account on GitHub.

Static reverse engineering of untrusted files with verifiable, byte-anchored evidence. Open tools (Ghidra, JADX, LIEF, YARA-X, Babel) in locked offline containers, from the command line or from AI ...

Agentic AI-driven EDR framework for Windows & Linux: hybrid rule + UEBA detection, attack-chain correlation, and human-approved adaptive rules. - coldman07/SentinelForge

CVE-2026-111585 — TeamViewer Remote-Control Screen Decompression Integer Overflow → Heap Buffer Overflow (PoC, fixed in 15.83, CVSS 8.8). Containerized lab + one-command repro with vulnerable/fixed...

云原生 SRE 巡检图谱 — Rust + WebAssembly 沙箱 + Tauri 桌面,一个人全栈实现的感知/定位/恢复控制面 - Thneoly/sre-inspection-graph

Cloud configuration vulnerability scanner using Python and local AI - sreejasagaram/CloudShield-AI

Intentionally vulnerable local training app (localhost only): SQL injection, reflected XSS, and IDOR, each with a fixed version and tests. - ranas-mukminov/VulnLab-App

Work 1 — secure Flask REST API, three-stage CI, and CVE-2024-23897 (Jenkins CLI) analysis - foreverlanterns/secure-api-cve-2024-23897

some yara rules. Contribute to JohnAtheism/yara development by creating an account on GitHub.

Linux page-cache write / LPE PoC collection: GTK3 frontend, 6 CVE chains, 740 prebuilt kernel offset tables - noobcjk/dirtychains

PoC for CVE-2026-98432 (Linux kernel IPv4 TCP inet_opt/ireq_opt use-after-free, CVSS 9.8): fully containerized podman+QEMU lab, KASAN-verified UAF reproduction in inet_csk_route_req with A/B fixed-...

CVE-2026-103039: Gravity Forms <= 3.1.2 PHP object injection to RCE. PoC by NOXCRYPT (noxcrypt-x). gen_payload.php is not included. - noxcrypt-x/CVE-2026-103039

对 DeepSeek 开源的 dsh-superagent-prototype 的独立审读：三个优秀设计、一条可走通的提权链，以及它与架构文章的距离 - guguthecoder/dsh-superagent-review

Contribute to S4nshine/poc-ssrf development by creating an account on GitHub.

WordPress XML-RPC pingback lab and crash PoC for CVE-2026-111497 (Brotli decoder out-of-bounds write). - Nyamort/brotli-pingback-lab

Authenticated WAR-upload to RCE on Apache Tomcat Manager. Needs manager-gui credentials. Builds the WAR in memory from a single JSP (no msfvenom), handles the CSRF nonce + JSESSIONID pairing, and d...

Contribute to bugbountytool/rce-finder development by creating an account on GitHub.

A consolidated collection of scripts for Burp Suite practitioners, offering ready-made automation, extension samples, and hands-on helpers for security testing workflows. - nathan-cooper1976/burp-s...