CVE-2026-46490 — samlify <2.13.0 SAML AttributeValue XML injection -> signed-assertion privilege escalation. Self-contained PoC, verified e2e. - BiiTts/CVE-2026-46490-samlify-SAML-Att...

CVE-2026-58138 — Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator (HostAccess.ALL). Lab + PoC, verified e2e (root). - BiiTts/CVE-2026-58138-Conductor-Unauth-RCE

One command. Full malware analysis. Generates YARA, Sigma, IOCs, MITRE mappings, and reports. - prxcode/malforge

行业调研引擎——researcher CLI + 多Agent红蓝对抗式研究。Quick/Brief/Standard/Comprehensive四种深度，证据驱动，支持Hermes/Claude。 - eddywang/industry-research-skill

Crypto-agile secrets vault: envelope encryption (HKDF · AES-256-GCM · ChaCha20-Poly1305), key rotation, JWT auth with revocation, from-scratch TOTP MFA, RBAC & audit logging. Java 21 · Spri...

Privilege Escalation Enumeration & Exploitation Tool and Comprehensive Vulnerability Scanner with Exploit Methods. - MadExploits/linemadpeas

The most comprehensive XSS cheatsheet on GitHub — payloads, filter bypass, WAF evasion, CSP bypass, DOM XSS, blind XSS, and real CVEs. - ardakocadoruu/xss-cheatsheet

CVE-2026-43284 - CVE-2026-43500 - CVE-2026-46300 Variant of dirtyfrag exploit - MadExploits/CVE-2026-46300

gRPC-Go RBAC Authorization Policy Bypass via Missing `:path` Slash (Auth Bypass) - JohannesLks/CVE-2026-33186

Contribute to juho-cphrx/kiro-pr-rce-poc development by creating an account on GitHub.

Curated offensive security tools and references — AD, web app, cloud, containers, C2, exploit dev, OSINT - byoniq/Security-Resources

To determine if a host is vulnerable to log4j CVE‐2021‐44228 - yahoo/check-log4j

This is a Python-based GUI tool for static analysis of various file types including executables, compressed files, documents, and PDFs. It identifies file types by signature, extracts metadata, ch...

把 Burp Suite 33 个插件（26 核心 + 7 Phase 3 高级工具）通过 MCP 协议桥接到 AI 客户端 - A4n9g7e2l/burp-mcp-bridge

Contribute to mlemkeRT/confluence-dashboard-poc development by creating an account on GitHub.

A Python-based vulnerability scanner using Nmap with service detection, OS detection, banner grabbing, and report generation. - Pree-tools/VulnScanner-Pro

module for vulnerability scanner project. Contribute to matthewrstone/puppet-vuln_scan development by creating an account on GitHub.

Remote Code Execution. Contribute to YsnBnc/rce development by creating an account on GitHub.

Java 源码离线审计工具 — 面向 100MB+ 反编译 Spring Boot 源码包的自动化安全审计。零依赖纯 Python，项目代码识别 | API 端点提取 | CVE 漏洞匹配 | 攻击利用链分析 | 10 章中文 Markdown 报告。适用于安全测试、CTF、代码审查、白盒审计。 - fewftybet/java-audit-tool

Contribute to Ocean-ng/C2-Backdoor-in-Drone-Fleet-An-End-to-End-Malware-Analysis-and-Risk-Based-Defense-Framework.md development by creating an account on GitHub.