RAT tools use shellcodes for remote access and system control. Shellcode injection and execution techniques bypass defenses, while red team tools focus on compiling and handling payloads for post-e...

Stored XSS vulnerability in codingWithElias school-management-system-php - elshanmammadoov/CVE-PoC-School-Management-System-PHP-XSS

Shellcode development involves creating payloads for post-exploitation tasks like antivirus evasion and UAC bypass. Tools like shellcode loaders and injectors enable execution, while assembly and e...

Malware builders create hidden trojans with features like UAC bypass and defender bypass. Tools like crypters and FUD ensure antivirus evasion, while shellcode and memory exclusion enhance stealth....

GuardDoc: Lightweight, local CLI tool & background daemon for document malware triage, extension spoofing detection, and real-time download watching on macOS & Linux. - jfx21/guarddoc

CVE-2026-72898 - Metabase. Contribute to codeb0ssx/CVE-2026-72898-PoC development by creating an account on GitHub.

Mission Critical Vulnerability Scanner (MCVS) Golang Project Root contains a Golang snippet that determines the root of a project. - schubergphilis/mcvs-golang-project-root

Contribute to PerfectPoH/cve-2019-10070-apache-atlas-xss development by creating an account on GitHub.

Windows Defender 0day vulnerability. Contribute to MSNightmare/ShieldBreak development by creating an account on GitHub.

Lightweight Windows endpoint security engine — SHA-256 + YARA-X + PE heuristics + real-time monitoring. Built in Rust. Final year capstone, B.Tech CSE 2026. - PrahaladVK/rustshield

Non-destructive PoC and evidence for CVE-2026-73673 affecting Netis NC63 V3.0.0.3327 - ozcanpng/CVE-2026-73673

Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service - damariion/CVE-2015-1925.RCE

This repository contains some Yara rules for detecting some malware. - R8d-1ntel/yar-rules

Advanced Zero-Day Vulnerability Scanner with GUI, designed for Bug Bounty Hunters and Ethical Hackers. - king7x00/KING7x-BugBounty

An AI-powered consent-first web vulnerability scanner designed to detect zero-day logic flaws, reduce false positives, and safeguard web applications. - MSMelok/cerberus-appsec

A secure PHP blog backend with admin panel, REST API, and PostgreSQL. Features role-based access control, image uploads, search/filter pagination, and hardened security (CSRF, XSS prevention, rate ...

Contribute to hackersatyamrastogi/xss2shell-pro development by creating an account on GitHub.

Burp Suite Pro extension (Montoya API): HTTP request-smuggling / desync hypothesis scanner with a framing-aware, oracle-free classifier and Burp Collaborator OOB (SSRF) detection. - patapik/desync-...

SurfaceSentry — self-hosted External Attack Surface Management (EASM) platform: multi-tenant discovery, enrichment, endpoint verification, tiered Nuclei scanning, finding lifecycle, and per-run evi...

Contribute to enhansome/enhansome-cybersecurity-blueteam development by creating an account on GitHub.