Days Without And RCE. Contribute to thezakman/DWARCE development by creating an account on GitHub.

Beginner YARA Malware Detector with 10 detection rules - Mshibe-dotcom/Yara-malware-detector

Repositório de estudo técnico e análise de scripts de exploit para Roblox. Código aberto, sem ofuscação, focado em auditoria de segurança e mecanismos de contra-medidas. - matheuspessole/rblx-secur...

A combination of CVE-2026-55494 and CVE-2026-62308 to get root privilege RCE in tugtainer - 4qu4r1um/tugtainer-1.30.2-CVE-2026-55494-and-CVE-2026-62308-to-RCE

Zapier-style webhook connector — declarative field mapping, SSRF-guarded relay, delivery logging - maa883151-eng/flowrelay

Serverless URL shortener on Cloudflare Workers: edge KV lookups, analytics written after the response via ctx.waitUntil(), D1 for aggregations, and SSRF-safe redirect validation. - jersonvillamizar...

A small list of template nuclei drafts. Contribute to panchiko-p/template-drafts development by creating an account on GitHub.

Yara rule repo. Contribute to defend-pippa/DEFEND-yara development by creating an account on GitHub.

A curated collection of Burp Suite plugins, extensions, and practical notes for security practitioners and penetration testers, including tools, scripts, and writeups that go beyond the official ma...

Mendeteksi versi (passive detection) & Exploitation CVE POC - 0xdenis77/CVE-2026-56291

Projeto de arquitetura de micro serviços resiliente para servir como laboratório de estudos, com observabilidade implementada - wfiabani/poc-micro-services

Contribute to keig352/Rust_Loader_Sliver_Shellcode development by creating an account on GitHub.

SENTINEL_QS is a high-velocity, multi-layered Intrusion Detection System (IDS) architected for modern Linux environments. It combines the deterministic precision of native C-compiled YARA rules wit...

CVE-2026-38526 exploit for Krayin CRM v2.2.x - Authenticated RCE via TinyMCE file upload bypass. Features interactive shell, multi-type payloads, auto shell generation, and verification. Author: Su...

Educational, Dockerized reproductions of publicly disclosed 2025-2026 CVEs: root-cause analysis, attack flows, PoCs, detections, and patch analysis. - diedromeo/CVE-Labs-2025-2026

Glyphs 3 Pro with Lifetime Access 2026 Best Typography Toolkit - lijefrp-ops/glyph-studio-legacy-bypass

nginx module blocking exploitation of long-patched web vulns (SQLi, Log4Shell, Shellshock, traversal, RCE chains). Not a WAF -- a near-zero-FP legacy-exploit floor. - myguard-labs/nginx-http-shield...

OWASP A10:2025 - Server-Side Request Forgery (SSRF): Test repo with intentionally vulnerable code for security scanning - plexicus-qa/plexicus-qa-a10-ssrf

SSRF, Server-Side Request Forgery: Exploiting a vulnerable avatar fetching feature using directory traversal to force the server to access an internal /private endpoint and retrieve a base64-encode...

Performed a comprehensive web application penetration test on DVWA using Kali Linux. Demonstrated SQL Injection, Reflected XSS, directory enumeration with Dirsearch, and HTTP request interception u...