PoC for CVE-2026-9090 — Casdoor SAML signature bypass (CWE-347). Reproduction-only; coordinated via CERT/CC VU#780781. - Kimdir01/CVE-2026-9090-poc

AV Evasion Kit is a comprehensive shellcode evasion framework using Indirect Syscalls, ETW patching, Module Stomping, .text code caves, compile-time string encryption, IPv4 obfuscation, XOR encrypt...

DSH 渗透测试模式：记录探索链路、资产与漏洞，并在 Web 中可视化展示。. Contribute to howmp/dsh-pentest development by creating an account on GitHub.

Cloud security & pentesting: AWS, Azure, GCP — IAM abuse, S3 misconfigs, SSRF metadata, secrets hunting, container security. ScoutSuite, Pacu, trufflehog. - Constan4/Ciber-Cloud

Pure-stdlib Python website vulnerability scanner (35+ checks) with a local safe lab target — zero third-party dependencies. - zqqqqqx/website-vuln-scanner

CVE-2026-43499 (GhostLock) rt_mutex stack-UAF privilege escalation research on Honor BVL-AN16 (Magic6 Pro, SM8650, kernel 6.1.128). Includes analysis docs, reverse-engineering scripts, disassembly ...

PoC for CVE-2026-56197 — Windows Admin Center (WAC) command injection RCE via invokeCommand; scripted no-browser auth (csrf/JWK/RSA-OAEP login chain), --cmd/--proof/--rev reverse-shell modes - vict...

CVE-2026-64638 adalah kerentanan Pre-Auth Reflected Cross-Site Scripting (XSS) di WordPress yang ditemukan pada tahun 2026. Kerentanan ini memungkinkan penyerang untuk menyisipkan kode JavaScript b...

Contribute to sanacvn/Nuclei_Template_V1 development by creating an account on GitHub.

Privacy-First, Self-Hostable & SSRF-Hardened MCP Server & Web Engine for AI Agents - Arbolencio/mcp-web-engine

GitLab AI Issue Bot 平台：webhook 监控 issue，Claude Code 自动处理并推送修复 - CodeFuckee/botler

Python-based vulnerability scanner for detecting open ports, basic web security issues, and potential vulnerabilities with HTML report generation. - RAJESHWARI-456/Vulnerability-Scanner

A vulnerability scanner powered by GLM-5.3. Contribute to 0xBuildx/Vuln-GLM-5.3 development by creating an account on GitHub.

One-command Docker lab reproducing CVE-2026-71362 (Adobe Commerce / Magento Open Source customer-session identity-switch account takeover, APSB26-92, CVSS 9.1) with a PoC and an A/B/A official-patc...

Reference-grade cheat sheets and query sets — Nmap, Wireshark, SOC detection queries, Python automation, and a one-command Elasticsearch detection lab. Tested in the field, not written for a course...

Contribute to FajrJauhar/YARA-RULE_GENERATOR development by creating an account on GitHub.

A lightweight HTTP history and keyword-search extension for **Burp Suite Community Edition**. - Laith-Abo-Hala/Burp_Keyword_Search_Extension

Progressive shellcode loader samples in C++ — educational research on Windows memory execution and AV evasion techniques. No payloads included. - Segaotava/shellcode-runner-research

Async Python detection engine covering Reflected/DOM XSS, BOLA static analysis, and Subdomain Takeover. - harshalsec/unified-vuln-scanner

This is a walkthrough for Wazuh siem lab monitoring the attack directly from my kali and catch the attack. - Arshiarpmsl/Wazuh-SIEM-Sliver-C2-Lab