Stealthy process hollowing tool for deploying Meterpreter, Sliver, or custom payloads. Dodges Windows Defender with AES‑encrypted shellcode and a silent Nim stager. - Ares-21/HollowGhost

Static + runtime security scanner for Claude Code hooks. Catches the May-2026 SessionStart-RCE pattern in CI. - Danush-Aries/hookguard

OpenSTAManager RCE Exploit (CVE-2026-38751). Contribute to hackthem/OpenSTAManager_RCE_Exploit-CVE-2026-38751- development by creating an account on GitHub.

Comprehensive toolkit for discovering, validating, and reporting exposed Google API keys (AIza format). Multi-service scanner (24 endpoints), Burp extension, capability testing, referer bypass, evi...

🔬 Curated collection of working Proof-of-Concept exploits for latest CVEs — tested & verified - javokhir-sec/CVE-PoC-Hub

Generate a YARA rule from real malware + benign corpora, auto-tune it to zero false positives against the benign corpus, and emit a precision/recall test-evidence report. Modernizes the abandoned y...

Malware Sandbox Engine. Automated static & dynamic analysis: intake, YARA scanning, Docker sandbox execution, IOC extraction, STIX export, and React dashboard. Built for safe malware triage...

Contribute to fankh/attackwatch-vulnerability-poc development by creating an account on GitHub.

An extension for finding hashes in HTTP requests and responses that pass through Burp - keyb1t/HashFinder_BurpExtension

CVE_2026_44963 Veeam Backup and Replication Authenticated RCE - suce0155/CVE_2026_44963

Standalone process manipulation SDK for x64 Windows. Indirect syscalls, dynamic function resolution, PE parsing, and injection strategies. No CRT, no external dependencies. - sebafvs/wraith

Multi-vector web application vulnerability scanner. SQLi / XSS / SSTI / SSRF / LFI / CMDi / NoSQLi / Open Redirect. Crawls + auth + reports. - shahram08/bugspray

An educational web vulnerability scanner built with Python to detect common security issues and generate professional security reports - MojeebAlmahmoudi/webguard-scanner

A Burpsuite plugin to audit Supabase instances. Contribute to imnotcha0s/supascan-burp development by creating an account on GitHub.

Full pen test engagement — SQL injection, RCE, Nmap, Metasploit, Burp Suite (UofT Cybersecurity) - tylerbcrawford/rekall-penetration-testing

Crawl4AI <= 0.8.6 pre-auth RCE via AST sandbox escape (gi_frame.f_back.f_builtins chain) — CVSS 10.0 - 0xEnc0der/CVE-2026-53753

Contribute to kaleth4/CVE-2026-20896 development by creating an account on GitHub.

Exploit a vulnerable signed kernel driver to terminate any process from kernel mode without security checks on Windows systems. - lukmannurhikma/UnknownKiller

Gogs has Path Traversal in organization name that results in RCE through Git hooks - thecodeb0ss/CVE-2026-52813

Proof-of-concept exploits for CVEs — security research, vulnerability analysis, and responsible disclosure - ykrishhh/cve-pocs