🔍 ReconForge - Enterprise Reconnaissance Framework | Go-based automated recon with 6 phases: Subdomain Enumeration, Live Host Detection, URL Discovery, Vuln Scanning (Nuclei), Port Scanning &am...

Cloud-native Django deployment on Azure using Helm charts for Kubernetes-style application packaging and automated infrastructure provisioning. - Xandane/cloud-native-django-azure-helm

Web Vulnerability Scanner is a Python-based cybersecurity project that detects basic web vulnerabilities such as Reflected XSS and input sanitization weaknesses. The scanner crawls web pages, extra...

CVE-2025-47812 Poc for WingData HTB . Contribute to 0xS4N4TG/CVE-2025-47812 development by creating an account on GitHub.

CVE-2026-39987 Exploitation Tool - Marimo < 0.23.0 Pre-Auth RCE (WebSocket) - M3PH1569/CVE-2026-39987-POC

Some Yara Rules . Contribute to DERE-ad2001/Yara development by creating an account on GitHub.

Scan and exploit WordPress vulnerabilities to identify and patch security weaknesses during authorized penetration tests. - Eastside-georgia30/Mephisto

Teardown of a Go-compiled ransomware family that uses repeating-key XOR instead of AES and writes its own decryption key to disk before encrypting. Includes a working free decryptor, YARA rules, ne...

Cloud-native threat hunting case study using Splunk Cloud to detect MITRE ATT&CK T1003.001 (LSASS Memory Dumping). Features custom SPL and runtime regex (rex) log parsing of raw Sysmon tele...

MESSAGING — umbrella multi-canal BR (email + SMS + push + WhatsApp + Telegram interno). Consolida ex-rewire-notify + ex-rewire-beacon (ADR 0108 C2). - Rewire-labs/rewire-messaging

📧 Create and send emails easily with PHPMailer, a powerful PHP class packed with features for reliable email delivery and customization. - Mr-Anonym/PHPMailer

Polymorphic AV/AMSI bypass toolkit - Donut shellcode runner for offensive .NET/PE tools - p3ta00/killshot

app for Upsilon Sigma Phi. Contribute to aejorango/upsilon-app development by creating an account on GitHub.

First public reverse engineering of GAMYBEAR, the Go backdoor used by UAC-0241 against Ukrainian education and state-authority targets. Static + dynamic analysis with 15 findings extending CERT-UA#...

Hands-on offensive engineering and defensive mitigation of core security vulnerabilities—covering Cryptography, Stack Overflows, XSS/CSP, SQLi, and TCP/IP MITM attacks—implemented within a containe...

PowerShell-based Blue Team monitoring project for Windows event analysis, suspicious activity detection, automated alerts, logging, and security report generation. - Tenorio04/BlueTeam-Monitor

CVE-2026-36239: Authenticated RCE in PbootCMS v3.2.12 backend (sitecopyright) - TazmiDev/CVE-2026-36239

A Burp Suite extension that seamlessly intercepts, decrypts, and re-encrypts AES-encrypted JSON payloads on the fly. - Re4lLife/AES-JSON-Native-Editor---Burp-Suite-Extension

ESLint-style linter for Sigma detection rules. Validates against Sigma 2.1.0, scores rules across six quality dimensions, emits stable rule IDs. - ni5h4nt/sigmalint

Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration tests and vulnerability assessments too. - edoardottt/missing-cv...