A collaborative hub for Nuclei templates. Contribute, share, and explore powerful vulnerability detection tools! - Spix0r/Nuclei-Community-Templates

CVE-2026-49772 — The Events Calendar (WordPress) unauthenticated blind SQLi PoC - joshuavanderpoll/CVE-2026-49772

Purple-team threat modeling in the browser. Zero dependencies. One HTML file. Offense and defense on one canvas. - BenjiTrapp/PurpleSkjaldborg

CASxploit – Windows SYSTEM reverse shell tool via PsExec with UAC bypass support. - p1rater/CASxploit

CyberShield Pro is a Flask-based web vulnerability scanner that performs SSL validation, security header analysis, port scanning, WHOIS lookup, XSS detection, SQL injection detection, risk assessme...

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rul...

Passive Windows malware scanner with YARA detection, live threat intelligence feeds, and a real-time Flask dashboard. - nitrofx210/silentguard

Contribute to 0xgh057r3c0n/CVE-2026-48907 development by creating an account on GitHub.

Vulnerability Scanner. Contribute to Somyaranjan7/SentinelScan development by creating an account on GitHub.

CVE-2026-39031 — offline plaintext password recovery for Lansweeper lsrunase 2.0 / lsencrypt 2.0 via a hardcoded RC4 key. PoC + technical advisory. - user6400/cve-2026-39031-lansweeper-lsrunase2-ls...

POC for CVE-2026-23744 for a python revshell. Contribute to daemoncibsec/mcpExec development by creating an account on GitHub.

二开dddd攻防信息收集扫描工具. Contribute to ddddpro/ddddpro development by creating an account on GitHub.

Open Source C2 Framework for Authorized Security Testing - Nakano-04/c2-dect-lite

Unauthenticated PHP Object Injection to RCE in WP Activity Log <= 5.6.3.1 (CVE-2026-54806) - joshuavanderpoll/CVE-2026-54806

AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services. - zaidanr/AuthMatrix

A plugin for Burp Suite Pro that uses the GraphQL schema to begin Active Scanning the entire endpoint. - FWDSEC/burp-auto-gql

nuclei templates that extract leaked credential values for geiger triage - puck-security/geiger-nuclei-templates

一个用于 AI 辅助漏洞挖掘的安全约束技能。它限制高危操作、过滤噪音发现，并要求基于可复现证据输出确认漏洞。 - Yliken/safeskills

跨平台进程内存关键字扫描工具，用于应急响应 / DFIR：在进程内存中搜索文本或 HEX 字节（自动多编码 UTF-8 / UTF-16LE / GBK），快速定位发起可疑连接、执行可疑命令的进程。提供 GUI 与纯静态 CLI，支持 Windows 与 Linux（amd64 / arm64，含国产化系统）。 - RynezzZ/MemScan

El exploit para obtener root usado la vulnerabilidad del CVE-2021-4034 o tambien llamado PwnKit el cual permite teniendo un shell hacer una escalada de privilegios siempre y cuando la version de pk...