Controlled PoC: consumer workflow demonstrating mutable-tag action RCE (authorized self-owned sandbox) - venkatchalla06/poc-mutable-action-consumer

Controlled PoC: composite action for demonstrating mutable-tag supply-chain RCE mechanism (authorized self-owned sandbox) - venkatchalla06/poc-mutable-action-demo

This python script exploit the vulnerable marimo /terminal/ws endpoint and returns a interactive shell. - dodeepsink/CVE-2026-39987.py

Lightweight C2 agent simulation framework for red team adversary emulation & offensive security research. Demonstrates basic C2 callback patterns for SOC monitoring, custom TCP packet frami...

CVE-2026-18366: Events Manager < 7.4.1 — Unauthenticated Privilege Escalation to Administrator. Write-up and proof-of-concept (poc7.py). - ghostpels/CVE-2026-18366

Fileless shellcode dropper in C++ using WinINet API. Downloads and executes shellcode in-memory without touching disk. Educational purposes only. - Segaotava/havoc-fileless-dropper

The project studies how antivirus engines detect shellcode and develops obfuscation techniques to evade them, then measures how successfully these modified payloads bypass detection in an isolated ...

A modular Web Application Vulnerability Scanner built with Python. Features HTTP header analysis, directory fuzzing, custom payload injection for SQLi/XSS detection, and automated reporting. Design...

Autogenerate YARA rules from collections of similar files - jhumble/sigmaker

Proof-of-concept for CVE-2026-18315 (TrueBooker WordPress Plugin): Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover - nastar-id/CVE-2026-18315-PoC