Python reconnaissance, crawling, and reflected-XSS learning scripts for authorized labs. - abomhmd00101/python-security-tools

Deliberately vulnerable crypto portfolio tracker — a hands-on university cybersecurity teaching lab (SQLi, XSS, CSRF, IDOR). Localhost only. - HelloTanvir/crypto-tracker-vuln-lab

AI Agent 全栈安全协议 — 非提示词，而是一套可执行的攻防规范。红/蓝/审计/咨询四模式切换，含状态管理(断点续传)、Token 斩断、防幻觉自检、11 类操作安全红线。15 平台场景覆盖 AD/云/移动。 - MWDLH/Full-stack-cybersecurity-expert

Reverse engineering, infrastructure analysis, and detection content for the ShinySp1d3r ransomware family and an associated rogue ScreenConnect / MeshCentral estate. 63 findings, 9 YARA, 36 Sigma, ...

RCE -> LPE to SYSTEM -> Local Posture Takeover. POC for HiSqoolManager MDM agent vulnerability. - Ender000/POC-RCE-LPE

CVE-2026-43499 exploit with OnePlus Ace3 support. Contribute to DistrictBlauw/CyberMeowfia-ace3 development by creating an account on GitHub.

OPNsense Root RCE (CVE-2026-57155). Contribute to babyshen/CVE-2026-57155 development by creating an account on GitHub.

CVE-2026-43499 GhostLock exploit for Redmi K70 Ultra (rothko) - data-only physmap overwrite - SlightNeko/ghostlock-rothko

Detection Rule / Sigma Rule Writing. Contribute to huzaifa847/BlueTeam-Week2 development by creating an account on GitHub.

Turn your scanner's flat CVE dump into a risk-ranked, SLA-bucketed remediation queue using EPSS exploit-probability + CISA KEV + asset criticality. FastAPI, runs fully offline. - SlateGitOr...

Cloud-agnostic GitOps platform: identical ArgoCD-managed stack (k3d/k3s, GitLab, Vault/ESO, Garage, LGTMP) deploys to a free localhost cluster or any CNCF Kubernetes backend via swappable Terraform...

Cbox SSRF — a hardened, config-driven guard against server-side request forgery for outbound URLs in Laravel. Blocks private/reserved/cloud-metadata targets, pins DNS, and refuses redirects. - cbox...

Contribute to te0rwx/CVE-2025-32433-Detection development by creating an account on GitHub.

Samsung libimagecodec.quram.so OOB Write PoC. Contribute to Filipemendonca1978/CVE-2026-21045_and_CVE-2026-21048 development by creating an account on GitHub.

Contribute to x-spy/CVE-2026-43499-popsicle development by creating an account on GitHub.

A simple Burp Suite plugin to let you create links that will resolve to IP/host pairs. - fang0654/burp_vhost_proxy

⚔️ Async Python CLI vulnerability scanner — fingerprints open ports, maps each to an OWASP Top 10 category, and generates AI-assisted (or offline) remediation patches. Built with Typer + Rich. Supp...

Detection rules from cyfar.ca engagement reports. Suricata, YARA, and host hunt commands with validated test fixtures. - boredchilada/cyfar-detections

Reproducer for CVE-2026-46591: Apache Camel camel-neo4j Cypher injection via property names in CamelNeo4jMatchProperties, enabling authorization bypass / cross-label data exfiltration (fixed in 4.1...