Red-team CLI that tests whether your AI agent can be prompted into stealing its own cloud instance-metadata (IMDS) credentials. - Iceman2050/agent-imds-selftheft-test

An extensible Semgrep-based vulnerability scanner for detecting and analyzing security vulnerabilities in source code. - kimhr8463/my-vuln-scanner

One-tap temporary root for the Amazon Fire TV Stick 3rd gen (sheldonp), wrapping the GhostLock exploit (CVE-2026-43499) - DarkDevil-937/make-it-root

Decentralised P2P botnet using toxcore. Contribute to 0x4meliorate/toxnet development by creating an account on GitHub.

VULKAN RCE cve-2022-3653 ICD CPU ATTACK FROM GPU . Contribute to SpiralBL0CK/VULKAN-RCE-cve-2022-3653 development by creating an account on GitHub.

POC for running Jupyter Server and Kubernetes-provisioned kernels in separate pods - soraaa013-ops/jupyter-platform-poc

常见 Web 安全漏洞的错误代码与修复对照（PHP / Go / Node.js）. Contribute to XiaoxinHuang-Git/security-fix-cookbook development by creating an account on GitHub.

LAN GUARD 是局域网资产与 CVE 风险管理平台，通过 Linux 探针采集设备信息，集中展示资产、漏洞风险与告警。 - zhangblue/lan_guard

A hands-on malware triage lab demonstrating YARA-based detection of synthetic downloader indicators through static string analysis, rule development, SHA-256 hashing, and positive and negative test...

Encrypted host & access manager for penetration tests (GUI + CLI + Sliver C2) - syrex1013/hostvault

CVE-2026-98260-多机型 Android 一键临时 Root 与管理器切换工具：支持 OnePlus / OPPO / Realme / iQOO，KernelSU / KernelSU Next / BakaSU / SukiSU Ultra / FinaSU - Yunnijian/Shark

CVE-2026-124194 PoC - Outlook spoofing/forced-authentication NTLM leak (patched 2026-11). Concept proof only, untested against vulnerable Outlook. - AmesianX/CVE-2026-124194-poc

Reviewed, look-only vulnerability checks for the Recon iOS app (mirror of ProjectDiscovery nuclei-templates, MIT) - sho-luv/recon-cve-checks

Contribute to csdovah/vuln-cve-2026-26119 development by creating an account on GitHub.

Windows App Store Elevation of Privilege. Contribute to karollooool/CVE-2026-119987-writeup-and-poc development by creating an account on GitHub.

Windows Common Log FileSystem Authentication 0day Local Privilege Escalation Vulnerability - MSNightmare/SignDrop

CCSO Workshop: Shellcode loader exercise. Contribute to shreyas-challa/babys-first-malware development by creating an account on GitHub.

Contribute to PurpleTeamSoftwareSolutions/cyberoptix.burp-extension development by creating an account on GitHub.

An AI-powered Python SAST vulnerability scanner for VS Code powered by Google Gemini and deterministic CVSS v3.1 severity scoring. - yessin-ze/ai-security-scanner-vscode-extension

To-do API PoC: Spring Cloud Gateway, JWT auth service, MCP server, nginx and Postgres via docker compose - gnagamohan/apis_poc