Hacking Hotspots: Pre-Auth Remote Code Execution, Arbitrary SMS & Adjacent Attacks on 5G & 4G/LTE Routers - actuator/DEFCON-33

Penpot's remote image import let an authenticated file editor turn a normal media convenience feature into backend-origin SSRF because attacker-controlled URLs crossed into a redirect-follo...

The SSRF filter checked hostname text, but the actual destination was decided later by DNS. That gap let attacker-controlled Webhook URLs reach loopback, metadata, and private network targets. - 0x...

KHAOS is a modern C2 framework that routes agent traffic through cloud services already trusted by enterprise networks. - 28Zaaky/khaos-c2

AI-ready vulnerability scanner for financial institutions - Emmanuel-Nimoh/SentinelScan

Python based Advanced Vulnerability Scanner. Contribute to akhilrajput-tech/advanced-vulnerability-scanner development by creating an account on GitHub.

Community curated list of templates for the nuclei engine to find security vulnerabilities. - MrKingKishore01/Nucluei-Temperatures

免杀. Contribute to Evilearth-dotcom/Payloadloader development by creating an account on GitHub.

A native-Windows network reconnaissance and vulnerability scanner, written from scratch in C (Winsock) - Thehan05/ReconX

Contribute to ZeyadElkhodari/Web_Vulnerability_Scanner development by creating an account on GitHub.

Repository for information about 0-days exploited in-the-wild. - googleprojectzero/0days-in-the-wild

A Proof of Concept for integrating Kubernetes-based development environments into existing Active Directory classrooms. - FgmBvB/ad-classroom-containers-poc

VSCode 语言服务插件，为泛微 Ecode 提供本地编辑与智能解析能力。. Contribute to MrBear-xzx/ecode-local development by creating an account on GitHub.

Adaptive Web Vulnerability Scanner. Contribute to anmoliot/web-vuln-scanner development by creating an account on GitHub.

A lightweight malware detection system for media files using heuristic analysis, YARA rules, and machine learning. - walakeshreyas/SilentEye

Ghost CMS Content API Blind SQL Injection. Contribute to n0bitaemon/CVE-2026-26980-PoC development by creating an account on GitHub.

A lightweight Burp Suite extension that logs every Repeater request/response in one searchable, HTTP-history-style table - and persists it across sessions in the project file. - Blueeyes3/Burp-Repe...

An AI-powered YARA Rule Generator that automates the creation of detection rules from malware indicators, file hashes, strings, and behavioral patterns, enabling faster and more efficient threat hu...

A yara based malware detection sandbox. Contribute to ogshrug/YEMU development by creating an account on GitHub.

Spring漏洞综合利用工具. Contribute to savior-only/Spring_All_Reachable development by creating an account on GitHub.

Contribute to fevar54/CVE-2026-20253-Splunk-Enterprise-Pre-Auth-RCE- development by creating an account on GitHub.