SecLeap 安全能力建设仓库，聚焦攻防研究、漏洞分析、安全运营、应急响应、威胁检测、自动化工具与知识沉淀。 - SecLeap/security-capability

poc. Contribute to MohamedAtefMohamed/xss-poc development by creating an account on GitHub.

Export all YARA-L rules from a Google SecOps (Chronicle) tenant to Excel (meta + outcome as columns) and per-rule .yaral backups. Read-only, one service account. - gromerosec/google-secops-rule-export

Advanced Cross-Platform C2 Framework for Security Research - ConstantineCTF/BLACKICE

Windows kernel security research suite - minifilter driver, YARA + ETW + behavior engine, Qt6 amber dashboard, local AI analyst (Qwen2.5). Download installer in Releases. - teohumble1/avsuite

An unauthenticated SQL injection vulnerability exists in the Vendure Shop API. A user-controlled query string parameter is interpolated directly into a raw SQL expression without parameterization o...

Contribute to Norbertoooo/spring-resilience4j-poc development by creating an account on GitHub.

Contribute to Christophep52/saas-vulnerability-scanner development by creating an account on GitHub.

Full-spectrum authorized pentest platform (PTES, findings, Nuclei, professional reports) - Life-Is-Nothing/harmattan-pt

This project demonstrates a real-world threat mitigation pipeline built with Python and Bash. A web server running on Ubuntu Server 22.04 is attacked by a Kali Linux machine using Nikto (a web vuln...

Pure-functional, signal-based SDK for embeddable widgets that mount safely into any page — no framework required. Fine-grained reactivity, XSS-safe templates, Shadow DOM isolation. Zero dependencie...

Tools and Techniques for Blue Team / Incident Response - A-poc/BlueTeam-Tools

Repository dedicated to publishing Yara rules for malware detection and supply chain attacks - lexs201992-gif/Yara-investigation-rules-

Open-source MCP server for official UAE open data — use our hosted instance or self-host. stdio + HTTP, SSRF-guarded, PII-redacted, 32 sources. - ahmedvnabil/uaemcp

The most configurable USB device library. Contribute to IntergatedCircuits/c2usb development by creating an account on GitHub.

Demonstrates SMB Relay attacks in an Active Directory Home Lab by leveraging Responder and Impacket's ntlmrelayx to relay NTLM authentication, obtain administrative access, execute remote c...

ReversingLabs YARA Hunting Rules. Contribute to reversinglabs/reversinglabs-yara-hunting-rules development by creating an account on GitHub.

`sh3llpass` takes raw Meterpreter (or any) shellcode, applies **5 layers of obfuscation** (XOR → RC4 → Byte Swap → Junk Insertion → Delta), and generates a polymorphic C loader. It compiles the loa...

A beginner-friendly educational Web Vulnerability Scanner built with Python to demonstrate core web security concepts and basic vulnerability assessment techniques. - Manjira13/basic-web-vulnerabil...