can-i gtfo is a collection of Kubernetes RBAC permissions which can be abused to escape from pods, escalate privileges, pivot and more. - m10x/can-i-gtfo

AI-authored YARA + Snort/Suricata detection rules for current malware campaigns and vulnerabilities. Each rule ships with reproducible specimens, structurally-similar benign cases, and a test trans...

Contribute to dimaskaje/Malware-Detector-using-YARA-Rules development by creating an account on GitHub.

CVE-2026-24061 exploit PoC. Contribute to jacubes/CVE-2026-24061 development by creating an account on GitHub.

Wazuh 4.7.2 SIEM on AWS via Terraform: manager, indexer and dashboard, with Suricata IDS and YARA malware agents plus VirusTotal integration - Occansey/terraform-wazuh

A high‑performance, memory‑safe malware static analysis platform written in Rust. Integrates YARA rules and supports PE/ELF/MachO analysis - niceyayale/openTrojan

Advanced Python C2 Framework with Fernet (AES) encryption, cross-platform persistence (Linux/Windows), and interactive Antigravity-style prompt. Developed as the core communications module for a Sy...

A practical guide to Nuclei for web security testing, vulnerability discovery, bug bounty hunting, and automated reconnaissance using ProjectDiscovery templates. - RushiVenkatadri/nuclei-security-s...

CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL) - Planetpliexpose/CVE-2026-41089-277

Contribute to TheCyberGeek/CVE-2026-4480-PoC development by creating an account on GitHub.

It is designed to demonstrate how malware maintains persistence by "checking in" with a remote server and how security analysts can detect this traffic in real-time. - Jothikumar...

CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL) - GalleryJoiner/CVE-2026-41089-686

Automated recon pipeline — Subfinder, HTTPX, Nuclei, Nmap, Scrapling. End-to-end attack surface discovery. - exorrtech/recon-toolkit

Popcorn HTB write-up covering advanced directory fuzzing, file upload bypass via magic numbers/extension spoofing using Burp Suite, and privilege escalation via CVE-2010-0832 (PAM MOTD File Tamperi...

CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL) - SkySmokeMoat/CVE-2026-41089-552

0-Day Research: Incomplete Fix Bypass in nested-property v4.0.0 — Array.prototype & Function.prototype Pollution | by Ojas Mehta - blah-blah-cell/broken-nest

Hands-on lab for CVE-2026-40072 — SSRF vulnerability in web3.py via CCIP Read (EIP-3668) - u1tr0nex/cve-2026-40072-ssrf-lab

A vulnerability scanner and exploitation framework targeting Spring, GraphQL, and React Server Components (RSC) stacks. Features dynamic WAF evasion, passive/active auditing, Out-of-Band (OOB) veri...

Contribute to t1ckprivate/CVE-2026-43284-Dirty-Frag development by creating an account on GitHub.

HeaderForge - Burp suite Extension. Contribute to dedsecLab/HeaderForge development by creating an account on GitHub.