A modular, multi-threaded web vulnerability scanner built with Python and Streamlit for detecting SQL Injection, XSS, and security misconfigurations. - kushharsh05/cyberscan

Wireshark analysis of real malware PCAP identifying C2 server and encoded beaconing traffic - shraddhhaapokharell/Malware-Traffic-Analysis-Incident-Response

Critical path traversal to RCE vulnerability in Jellyfin Media Server (CVSS 9.9). Includes proof-of-concept exploit, technical analysis, and detection tools. - keraattin/CVE-2026-35031

Contribute to bootstrapbool/cve-2026-4257 development by creating an account on GitHub.

Detected vuln classes: SQLi, XSS, LFI, Command Injection, Open Redirect, RCE via eval, Insecure Deserialization, XXE, SSRF, Path Traversal, Session Fixation, Weak Crypto, Hardcoded Secrets, Info Ex...

OWASP-aligned web vulnerability scanner. Detects SQLi, reflected XSS, missing security headers, CSRF, sensitive paths, and HTTPS issues. BFS crawler, concurrent checks via ThreadPoolExecutor, HTML/...

Aplikasi pemesanan venue olahraga berbasis web dengan peran admin dan pengguna, mendukung pembayaran Midtrans, manajemen gambar Cloudinary, polyglot persistence, serta keamanan melalui validasi inp...

Cross-platform C2 implant framework. Every TTP ships with YARA rules, Sigma rules, and IR playbooks. - diemoeve/oxide

Reverse-engineers Flutter’s SSL verification to generate Frida and Renef scripts that bypass SSL pinning in libflutter.so at runtime. - xscosa400-wq/universal-flutter-ssl-pinning

CVE-2026-0827 PoC. Contribute to ZeroMemoryEx/CVE-2026-0827 development by creating an account on GitHub.

🛡️ 网络安全入门指南 | 零基础学习网络安全，涵盖Web安全、渗透测试、CTF入门. Contribute to MengYanChenHub/security-beginner-guide development by creating an account on GitHub.

this was a project to make as many tests and verifications for the old Raytheon forge project. - wezzels/forge-c2-go

Windows VEH-based debugger with DAP + MCP support — anti-debug bypass, hardware breakpoints, AI agent integration - knewstimek/veh-debugger

Self-hosted Burp Collaborator alternative — DNS+HTTP+HTTPS+SMTP listeners, browser dashboard, cloud metadata detection, 46 SSRF payloads - Zeeshanafridai/SSRF-Callback-Server

OAuth 2.0/OIDC attack suite — state CSRF, redirect_uri bypass (22 variants), PKCE downgrade, scope escalation, token leakage, OIDC flaws - Zeeshanafridai/OAUTH-Flow-Analyzer

Contribute to terminat0r7031/composer-CVE-2026-40261-CVE-2026-40176-PoC development by creating an account on GitHub.

Contribute to OnlineUnknowns/Turnstile-Bypass-Cloudflare- development by creating an account on GitHub.

A Server-Side Request Forgery (SSRF) vulnerability exists in the `/get_geo_ip` endpoint of DeepAI.org's API. The endpoint trusts the `X-Forwarded-For` header without validation, allowing an...