SecureLedger — Spring Boot 3 secure task/audit API on the hardened UBI9 base; DISA STIG + CVE gated in CI - kelleyblackmore/rhel9-app-full

Military-grade Android Antivirus featuring AI-powered static analysis, Photon Technology, and real-time Ransomware mitigation. - HydraDragonAntivirus/HydraDragonAV-Mobile

Proof-of-concept exploits for CVEs — security research, vulnerability analysis, and responsible disclosure - ykrishhh/cve-pocs

Gogs has Path Traversal in organization name that results in RCE through Git hooks - thecodeb0ss/CVE-2026-52813

Exploit a vulnerable signed kernel driver to terminate any process from kernel mode without security checks on Windows systems. - lukmannurhikma/UnknownKiller

Contribute to kaleth4/CVE-2026-20896 development by creating an account on GitHub.

Crawl4AI <= 0.8.6 pre-auth RCE via AST sandbox escape (gi_frame.f_back.f_builtins chain) — CVSS 10.0 - 0xEnc0der/CVE-2026-53753

Full pen test engagement — SQL injection, RCE, Nmap, Metasploit, Burp Suite (UofT Cybersecurity) - tylerbcrawford/rekall-penetration-testing

A Burpsuite plugin to audit Supabase instances. Contribute to imnotcha0s/supascan-burp development by creating an account on GitHub.

An educational web vulnerability scanner built with Python to detect common security issues and generate professional security reports - MojeebAlmahmoudi/webguard-scanner

Multi-vector web application vulnerability scanner. SQLi / XSS / SSTI / SSRF / LFI / CMDi / NoSQLi / Open Redirect. Crawls + auth + reports. - shahram08/bugspray

Standalone process manipulation SDK for x64 Windows. Indirect syscalls, dynamic function resolution, PE parsing, and injection strategies. No CRT, no external dependencies. - sebafvs/wraith

CVE_2026_44963 Veeam Backup and Replication Authenticated RCE - suce0155/CVE_2026_44963

An extension for finding hashes in HTTP requests and responses that pass through Burp - keyb1t/HashFinder_BurpExtension

Contribute to fankh/attackwatch-vulnerability-poc development by creating an account on GitHub.

Malware Sandbox Engine. Automated static & dynamic analysis: intake, YARA scanning, Docker sandbox execution, IOC extraction, STIX export, and React dashboard. Built for safe malware triage...

Generate a YARA rule from real malware + benign corpora, auto-tune it to zero false positives against the benign corpus, and emit a precision/recall test-evidence report. Modernizes the abandoned y...

🔬 Curated collection of working Proof-of-Concept exploits for latest CVEs — tested & verified - javokhir-sec/CVE-PoC-Hub

Comprehensive toolkit for discovering, validating, and reporting exposed Google API keys (AIza format). Multi-service scanner (24 endpoints), Burp extension, capability testing, referer bypass, evi...

OpenSTAManager RCE Exploit (CVE-2026-38751). Contribute to hackthem/OpenSTAManager_RCE_Exploit-CVE-2026-38751- development by creating an account on GitHub.