A comprehensive portfolio of vulnerability research, network exploitation, and application security mitigations. Features custom exploits for DNS/TCP protocols, DOM-based XSS worms, SQL injection b...

Desktop app that detects process-injection malware in Windows memory images — a 7-stage Volatility 3 pipeline producing court-style PDF reports, STIX/CSV IOCs, and YARA/Sigma rules. - Ashel7577/mem...

尝试移植CVE-2026-43499提权漏洞到HW P20Pro上. Contribute to zychen027/CVE-2026-43499_HW-CLT-AL01 development by creating an account on GitHub.

all nuclei templates. Contribute to Hacker0neKD/nuclei_templates development by creating an account on GitHub.

Proof of Concept for CVE-2026-19598 affecting Pods <= 3.3.9. - DeadExpl0it/CVE-2026-19598-PoC

Jenkins pipeline practice for SAST scanning and Docker Compose deployment. - jo-0412/vuln-spring-sast-practice

Download YARA rules to detect, classify, and investigate suspicious files with a trusted open-source engine. Build precise patterns, automate security checks, speed up incident response, and streng...

CVE-2026-64849 PoC. Contribute to BiuTrap/CVE-2026-64849 development by creating an account on GitHub.

A minimal Linux x86-64 staged shellcode designed to demonstrate how a compact first-stage payload can load a larger second-stage shellcode into memory. - sebas-gith/TinyShellcode

picoclone CTF challenge: Shellcode Shack (binary exploitation · hard) - sparflag/shellcode-injection

Automated comparison of Trivy, Snyk and Clair . Contribute to Manju0301/msc-container-vulnerability-scanner-comparison development by creating an account on GitHub.

A dual-mode Web vulnerability scanner with active crawling/detection and passive traffic analysis - Dingding6633/websentry

CI/CD-ready Python automation for continuous YARA rule ingestion, signature deduplication, and Wazuh indexing. - Hackdany/IDS-YARA-Rule-Automation

EncryptInterceptor fail-open bypass in Apache Tomcat Tribes clustering leading to unauthenticated RCE via Java deserialization. - CypherHippie/CVE-2026-34486---unauthenticated-RCE-via-Java-deserial...

picoclone CTF challenge: Reflected XSS (web · easy) - sparflag/xss-reflected

picoclone CTF challenge: Stored XSS (web · medium) - sparflag/xss-stored

Automated vulnerability scanner aligned with OWASP Top 10 (2024/2025) - leomarqueseh/BlueGuard

Wire a Greenbone/OpenVAS vulnerability scanner into Wazuh+Graylog: read-only GMP collector, dual delivery, Wazuh rules (JSON-decoded), and a vulnerability dashboard. Sanitized reference. - secdoc/g...

Add ringtones to your cobalt strike clients to make engagements more fun - deguzmanjc/cobaltstrike_ringtones

Contribute to codeb0ssx/CVE-2026-64849-PoC development by creating an account on GitHub.