Capture request/response pairs from the Proxy, edit them, and have Burp automatically serve your modified versions whenever a live message matches. - UmbraDeorum/Burp-Manipulator-Extension

Reverse engineering & malware analysis, curated and verified — disassemblers, unpacking, exploit dev, fuzzing, DFIR, and the deep-cut writeups other lists miss. - ZX41R/awesome-reverse-engi...

Some sensitive backend endpoint which can be leaked in HP DeskJet 2800 series printer - typedefabcd1234ntd/CVE-2026-13753-poc

Uses [yara-x](https://github.com/VirusTotal/yara-x) and a configurable ruleset to publish signature hits as AZUL features. - AustralianCyberSecurityCentre/azul-plugin-yara

Contribute to meeque/xss-demo-app development by creating an account on GitHub.

Detecting malware C2 traffic using network metadata and beacon analysis - Imteyaz-git/malware-c2-traffic-classifier

CVE-2023-34468 Apache NiFi ExecuteSQL H2 RUNSCRIPT RCE PoC - ozcanpng/CVE-2023-34468

Remote code execution for the pokewalker via arduino mega - mamba2410/pokewalker-rce

CVE-2019-0232 - Apache Tomcat CGIServlet enableCmdLineArguments RCE - PoC Exploit - yuzuki-ayanami/CVE-2019-0232

This repo contains everything needed to run your own Interactsh OOB (out-of-band) interaction server, use it from the Interactsh Collaborator Burp extension, and keep proof-of-concept evidence orga...

A Burp Suite extension that automatically discovers API endpoints, organizes them by host, and generates OpenAPI (Swagger) documentation in real time. - mesbah-diu/API-Discovery-Pro

Federated health information exchange reference: EU/US jurisdiction cells, OPA policy-as-code, OPAL live consent, FHIR R4 - SafetyMP/Healthcare-Data-Exchange

Ghostlink HTB — Full Chain AD + Gogs Exploitation | MQTT → NTLM Relay → Path Traversal → CVE-2025-8110 → ADCS ESC11 → DCSync | AMN SECURITY - amnsecurity/internal-domain-development-compromise-asse...

CVE-2025-24813 - Apache Tomcat RCE via Session Deserialization - PoC Exploit - yuzuki-ayanami/CVE-2025-24813

Penetration test report: OpenSTAManager RCE, NFS misconfiguration, Roundcube email access, OliveTin command injection | Arabic/English | AMN SECURITY - amnsecurity/support-infrastructure-compromise...

DFIR case: injected shellcode in powershell.exe. Contribute to Ivan-qa-rgb/powershell-shellcode-case development by creating an account on GitHub.

XCloak Security Suite is a self-hosted, open-architecture security operations platform combining NGFW, SIEM, EDR, and SOAR capabilities into a single unified system. - The-Abhishek1/XCLOAK-SECURITY...

This final ledger shifts focus to proactive defense engineering and threat intelligence mapping. It outlines how to isolate malicious host binary artifacts, calculate immutable SHA-256 file hashes ...

Defensive Windows memory-forensics triage CLI built around Volatility3, with evidence correlation, YARA support, transparent risk scoring, and reproducible reporting. - ThanhTuanjk/RAMScope