CVE-2026-2586 — Eclipse GlassFish EL injection to RCE - GabrielHA12/Glassfish-research

Agent skill that audits a Rails codebase for CVE-2026-66066 (KindaRails2Shell) — Active Storage + libvips arbitrary file read / RCE, checking Rails and libvips versions and block-untrusted mitigati...

A safe, non-destructive automated web vulnerability scanner built with Python and FastAPI. - eesha-atluri/web-vulnerability-scanner

Full malware analysis of a PlugX/Korplug DLL side-loading backdoor — static, dynamic, and reverse engineering in an isolated lab. Includes IOCs, YARA rules, and a full report. - jafeeri/plugx-korpl...

POC test repo. Contribute to nologs1/matlab-poc-ssrf development by creating an account on GitHub.

A curated collection of essential resources, tools, and references for Security Operations Center (SOC) analysts. - MrM8BRH/Defensive-Security-Hub

OWASP Top 10 web vulnerability scanner: security headers, TLS, XSS, SQLi detection — pure Python stdlib - Ibby111GT/webrecon

Lightweight C++ Telegram C2 framework featuring dynamic overlay configuration and remote execution capabilities. - xejiro1133/TeleC2-Framework

Burp Suite Bambda useful scripts. Contribute to mathis2001/Burp-Bambda development by creating an account on GitHub.

A Burp Suite extension that installs and updates other Burp extensions straight from GitHub repositories — the ones that never made it into the official BApp Store. - creep33/Community-Extensions

Security vulnerability scanner for Crystal shard dependencies. - hahwul/shards-audit

MCP 服务器，让 AI 通过 Cherry Studio/Claude Desktop 直接调用 Kali Linux 网络工具。12 个网络维护 + 7 个渗透测试工具，MIT 开源。 - xhj-cloud/kali-mcp

Contribute to webshellseo8/CVE-2026-50522-Proof-of-Concept development by creating an account on GitHub.

Contribute to webshellseo8/CVE-2026-57811-Proof-of-Concept development by creating an account on GitHub.

Google Cloud Pub/Sub End-to-End POC using .NET 8, Docker and Cloud Run - Vishnuvardhanpathak/PubSubPOC

A Python-based toolkit for static PDF malware analysis using metadata extraction, YARA scanning, IOC detection, JavaScript analysis, risk assessment, and automated report generation. - Tannu9211/PD...

Python-based vulnerability scanner that analyzes HTTP security headers, response time, server information, and generates a security assessment report. - giftyvarughese/vulnerability-scanner

JustScan is a self-hosted container image vulnerability scanner powered by Trivy and Grype or Artifactory Xray - JustLABv1/justscan

fastjson2_exp. Contribute to lufeirider/fastjson2_exp development by creating an account on GitHub.

Proof of Concept (PoC) demonstrating the CVE-2026-18220, an out-of-bounds (OOB) write vulnerability in the DLX ELF backend of GNU binutils (specifically triggered via `objdump -g`) - 4D4J/objdump-O...