VampSecure Labs — Subdomain Takeover Vulnerability Scanner - belky-me/vamp-subdomain-takeover

AES-256-CBC shellcode loader with Hell's Gate direct syscalls and Early Bird APC injection - darkness215/darkcrypt

High-assurance, artifact-agnostic prompt for authorized security labs, exploit-chain research, PoC validation, and evidence-led reporting. - dinosn/security-research-orchestrator-prompt

4xx auth/authz bypass scanner — 54 verbs, 1137 headers, 22+ path tricks, FP suppression, Burp integration - Thar-un/auth-bypass-scanner

A basic network scan using the Nessus Vulnerability Scanner - signature-creator/NessusScan

Contribute to MinhHK68/CVE-2026-13158 development by creating an account on GitHub.

GLPI Privilege Escalation via authtype Manipulation PoC - CVE-2026-53625. Ethical PoC for the GLPI vulnerability allowing a Technician to take full control of any Super-Admin account through REST A...

Oracle Forms and Reports on WebLogic is powerful but notoriously difficult to diagnose. This script library exists because the author has spent too many hours debugging obscure configuration issues...

Contribute to tripatpu/xssadvancehunt development by creating an account on GitHub.

Automated Vulnerability Assessment & Security Audit Framework with CVSS v3.1 Scoring, 16 Security Audit Engines, OWASP/ISO/PCI Mappings & Graphical Executive HTML Dashboards. - pava...

Spy vs Defender - educational malware lab: 20 technique demos, HTML game, YARA/Sigma detection rules, Windows Sandbox launcher - m55681518-byte/malware-lab

Python-based Vulnerability Scanner using Nmap with automated PDF reporting. - vardhanpetakamsetty2005-max/Python-Vulnerability-Scanner

First public analysis of SoftLanding UEFI bootkit: Ring -2 implant, CVE-2025-7029, 240+ Gigabyte boards, GPU AI evasion, dual C2. IOCs + YARA + Sigma + Suricata included. - ARES-SYS/uefi_bootkit_so...

x64 PIC shellcode that enable chrome CDP in-memory and extract/exfiltrate cookies - Nuf1p/RepentanceStealer

APK爆毒免杀处理方案 - https://www.133l.com. Contribute to scdnai/apk-antivirus-evasion-20260801 development by creating an account on GitHub.

My write-ups from CyberDefenders' Blue Team labs, solved using Wireshark. Covers TeamCity RCE (CVE-2024-27198), XSS session hijacking, and LLMNR/NBT-NS credential poisoning — each with step...

Modern XSS detection engine with real browser validation, designed for authorized security testing. - tX-c0re/xss-grenade

Recon → scan → report CLI penetration-testing orchestrator (native checks + nmap/nuclei/httpx/sqlmap). Authorized use only. - Ayberk-Irmak/reconowl

Contribute to qist/xray-ui development by creating an account on GitHub.

Dependency-free JS quiz engine built to expose core language internals — execution contexts, hoisting, TDZ, closures, event loop — with XSS-safe DOM rendering (no innerHTML) - PranavRoy07/vanilla-j...