Proof of concept for CVE-2026-54992, an MSMQ remote-read integer overflow - DavidCarliez/CVE-2026-54992-PoC

Python-based Web Vulnerability Scanner for SQL Injection and XSS Detection. - shreya647/web-vulnerability-scanner

Local-first static malware analysis desktop app and CLI built with Python, PyQt6 and YARA. - batuthzcode/batuthzcode-file-inspector

this is for testing XSS vulnerability within the application - QaTesterAkash/XSS-poc

A Burp Suite extension for hunting access-control bypasses on 401/403 protected endpoints. Right-click any request, send it to 401/403 Overrule, and it fires a curated set of well-known WAF/auth by...

Burp Suite extension with Frida hybrid for native process traffic intercept (EchoMirage-style) - KaiHT-Ladiant/BurpMirage

RKI Metadata Exchange | Next generation editor application that allows creating and editing rules to non-destructively manipulate metadata even as it automatically updates. - robert-koch-institut/m...

复现《悬挂的指针、脆弱的内存 ──从一个未公开的漏洞到 Pixel 9 Pro 提权》. Contribute to wpcnn/maliexp development by creating an account on GitHub.

Python reconnaissance, crawling, and reflected-XSS learning scripts for authorized labs. - abomhmd00101/python-security-tools

Deliberately vulnerable crypto portfolio tracker — a hands-on university cybersecurity teaching lab (SQLi, XSS, CSRF, IDOR). Localhost only. - HelloTanvir/crypto-tracker-vuln-lab

AI Agent 全栈安全协议 — 非提示词，而是一套可执行的攻防规范。红/蓝/审计/咨询四模式切换，含状态管理(断点续传)、Token 斩断、防幻觉自检、11 类操作安全红线。15 平台场景覆盖 AD/云/移动。 - MWDLH/Full-stack-cybersecurity-expert

Reverse engineering, infrastructure analysis, and detection content for the ShinySp1d3r ransomware family and an associated rogue ScreenConnect / MeshCentral estate. 63 findings, 9 YARA, 36 Sigma, ...

RCE -> LPE to SYSTEM -> Local Posture Takeover. POC for HiSqoolManager MDM agent vulnerability. - Ender000/POC-RCE-LPE

CVE-2026-43499 exploit with OnePlus Ace3 support. Contribute to DistrictBlauw/CyberMeowfia-ace3 development by creating an account on GitHub.

OPNsense Root RCE (CVE-2026-57155). Contribute to babyshen/CVE-2026-57155 development by creating an account on GitHub.

CVE-2026-43499 GhostLock exploit for Redmi K70 Ultra (rothko) - data-only physmap overwrite - SlightNeko/ghostlock-rothko

Detection Rule / Sigma Rule Writing. Contribute to huzaifa847/BlueTeam-Week2 development by creating an account on GitHub.

Turn your scanner's flat CVE dump into a risk-ranked, SLA-bucketed remediation queue using EPSS exploit-probability + CISA KEV + asset criticality. FastAPI, runs fully offline. - SlateGitOr...

Cloud-agnostic GitOps platform: identical ArgoCD-managed stack (k3d/k3s, GitLab, Vault/ESO, Garage, LGTMP) deploys to a free localhost cluster or any CNCF Kubernetes backend via swappable Terraform...