Public threat-hunting resources: Sigma and YARA rules, IOCs, and adversary infrastructure research. - Cybrani-Intel/threat-hunting

MCP Server for Burp. Contribute to danielgallen/mcp-server development by creating an account on GitHub.

Userland code execution on Nintendo Switch 1 and 2 via Balatro save data: a Lua REPL and FTP server in place of the game - Luminger/balatro-switch-rce

SiteScanner is a robust web security application that audits websites to identify active technologies, underlying security protocols, and potential vulnerabilities. • Hardened Security: Engineered ...

“Validador de seguridad para servidores MCP que solo reporta lo que consigue reproducir”. - acanellada/Lynceus

XSS payload list, testing checklist, and a Bash automation workflow for finding reflected XSS. - chsxthwik/HUNTER-XSS

Find code injected into running Windows processes: reflective DLLs, shellcode threads, process hollowing, inline & IAT hooks, module stomping. Read-only, zero dependencies. - njuj/ghost-hunter

PoC: community-operators workflow_run artifact -> GITHUB_OUTPUT -> github-script RCE (authorized) - PDFtoMark/gab-poc-co-wfr

Linux 内核高危漏洞应急加固执行清单：暴露面体检、包过滤缓解、多路监听、开机持久化、补丁水位监控，全部带实测判据 - nykc2w55fv-boop/linux-kernel-cve-hardening

The EyalSec Python runtime, the best Python security product there is. Run your existing Python app through it unchanged and it reports or blocks attacker-controlled data reaching SQL queries, shel...

Semgrep rules for Python: request data reaching SQL, shell commands, deserializers, file paths and outbound URLs in Django, Flask and FastAPI. - EyalSec/semgrep-rules

Contribute to ItsDannz/BlueTeam-SOC-WriteUp development by creating an account on GitHub.

CLI scanner and PoC for CVE-2026-109618 / CVE-2026-109619 (PHP OOM heap corruption and session upload-progress injection, CVSS 9.2). Affects PHP 5.4.0-8.5.11; patched in 8.2.35, 8.3.36, 8.4.27, 8.5...

⭐️ Burp Suite | Web Application Security Testing Toolkit | Penetration Testing Software | HTTP Proxy & Interceptor | Vulnerability Scanner | Manual & Automated Testing Tool | Setup ...

DOM-based XSS — Intigriti BRP CTF 2026. Contribute to venilton-dados/intigriti-brp-xss-writeup development by creating an account on GitHub.

Reusable Laravel security package with HTML sanitizer, XSS cleaner and stored-XSS stripper - microweber-packages/microweber-security

ft_Rainfall — x86-64 ELF binary exploitation, reverse engineering, and documented solutions. - Zibgame/ft_rainfall

Data pipeline that detects early warning signs before vulnerabilities are actively exploited (NVD, CISA KEV, EPSS · Python, AWS S3, Snowflake, dbt, Airflow) - Tejakarthik200212/Vulnerability-Intell...

PoC of GitLab running on Kubernetes. Contribute to teddy931130/gitlab-k8s development by creating an account on GitHub.

Write-up of Intigriti’s “Pray For Nepal” challenge — DOM Clobbering XSS - hellnrock/writeup-pray-for-nepal

Contribute to sensei-minchi/stored-xss-CS development by creating an account on GitHub.