ClickFix lures, legit-service C2, delivery and initial-access tooling — red-team framework (Python 3.11+) - galaxytrip5/redveil

Exploited-CVE-Watch. Contribute to CYBERMED1C/Exploited-CVE-Watch development by creating an account on GitHub.

A full-stack web vulnerability scanner and security dashboard built with Python, Flask, and JavaScript to analyze security headers, payload vulnerabilities, and web application security configurati...

ANE-Exploit. Contribute to SKVLENT/ANE-Exploit development by creating an account on GitHub.

PoC: MSDO checkov external-checks-dir RCE via PR-root .checkov.yaml - PDFtoMark/gab-poc-msdo-checkov

检测 OpenSSH + musl 无 PAM 环境的密码认证绕过（* 锁定账户）. Contribute to yanxinwu946/musl-ssh-bypass-scan development by creating an account on GitHub.

CVE-2026-102334 nginx proxy manager Exploit . Contribute to davidoberst/CVE-2026-102334 development by creating an account on GitHub.

Analyzed Agent Tesla malware and developed YARA and Sigma rules to detect its behavior. - bran-dot-flake/Agent-Tesla-Malware-Analysis-and-Detection-Engineering

[ghassess sandbox] Protection exists but admins can bypass: ruleset with 'always' bypass for repo admins + org admins, and classic protection without enforce_admins. - CICD-Test-Ric...

[ghassess sandbox] Hardened default branch via repository ruleset (2 approvals, code owners, status checks, signed commits, linear history, no bypass) + tag ruleset. - CICD-Test-RichF/bp-strong

nginx CVE-2025-50579 CORS Exploit . Contribute to davidoberst/CVE-2025-50579 development by creating an account on GitHub.

CVE-2026-102334 nginx proxy manager Exploit . Contribute to davidoberst/CVE-2026-102334-exploit development by creating an account on GitHub.

Contribute to redfishrouge/CVE-2026-58868-PoC development by creating an account on GitHub.

Contribute to MemDecompression/iscsicpl-uac-bypass development by creating an account on GitHub.

CVE-2026-123158 SSHole — OpenSSH authentication bypass via musl crypt() overflow on Alpine Linux (Exploit PoC) - gabrielunknown/CVE-2026-123158_SSHole

Covert C2 channel over legitimate platforms — stealthy command and control for authorized red team ops - jankesec/ghostlink

Self-hosted dashboard of critical vulnerabilities for sysadmins: CISA & VulnCheck KEV, Cloudflare Zero Wire, Microsoft Patch Tuesday, Ubuntu, Fortinet, TrueNAS, exploit code and EPSS, with ...

ZTE P24 (HGUV6.6.3B5.x): local root from a low-privilege Telnet session via an undocumented login -t flag in SUID BusyBox. Research notes + PoC. - slpkbt/zte-p24-hguv663-root-exploit

CVE-2026-122158: InvoiceShelf cross-tenant privilege escalation analysis and safe local-lab PoC - capivara-research/CVE-2026-122158

PoC for an OpenVPN Windows Interactive Service privilege-boundary bypass that lets a user-selected OpenSSL provider perform privileged route operations through an inherited service channel. - refia...

pre-authentication remote code execution vulnerability affecting OpenIdentityPlatform OpenAM in versions equal to or earlier than 16.0.5 - duohnson/CVE-2026-33439-PoC