Controlled PoC: consumer workflow demonstrating mutable-tag action RCE (authorized self-owned sandbox) - venkatchalla06/poc-mutable-action-consumer

Controlled PoC: composite action for demonstrating mutable-tag supply-chain RCE mechanism (authorized self-owned sandbox) - venkatchalla06/poc-mutable-action-demo

This python script exploit the vulnerable marimo /terminal/ws endpoint and returns a interactive shell. - dodeepsink/CVE-2026-39987.py

Lightweight C2 agent simulation framework for red team adversary emulation & offensive security research. Demonstrates basic C2 callback patterns for SOC monitoring, custom TCP packet frami...

CVE-2026-18366: Events Manager < 7.4.1 — Unauthenticated Privilege Escalation to Administrator. Write-up and proof-of-concept (poc7.py). - ghostpels/CVE-2026-18366

Fileless shellcode dropper in C++ using WinINet API. Downloads and executes shellcode in-memory without touching disk. Educational purposes only. - Segaotava/havoc-fileless-dropper

The project studies how antivirus engines detect shellcode and develops obfuscation techniques to evade them, then measures how successfully these modified payloads bypass detection in an isolated ...

A modular Web Application Vulnerability Scanner built with Python. Features HTTP header analysis, directory fuzzing, custom payload injection for SQLi/XSS detection, and automated reporting. Design...

Autogenerate YARA rules from collections of similar files - jhumble/sigmaker

Proof-of-concept for CVE-2026-18315 (TrueBooker WordPress Plugin): Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover - nastar-id/CVE-2026-18315-PoC

a walkthrough of all six levels of flaws.cloud — aws s3, ebs, imds and iam misconfigurations, and how they chain into a full account compromise - Elnimo-00/cloud-infra-pentest

Web access skills for Prime Agent: multi-backend search (Gemini grounding, Tavily, Brave, Serper, Exa, SearXNG, DuckDuckGo) and SSRF-guarded page fetching with HTML-to-markdown and PDF extraction -...

Basic web vulnerability scanner for educational purposes - CyberPhantom87/web-vuln-scanner-

This tool would inject 3000 lines of reflected cross site scripting payloads and find a way to at least get 1 working and has built in coded ai support for assistance - Micatob/Xss-Scanner

Contribute to jashwanth0726/web-vulnerability-scanner development by creating an account on GitHub.

Contribute to Jaybee124/YARA-malware-Lab development by creating an account on GitHub.

A Python-based mini vulnerability scanner for authorized network and web security assessments. - uzair-hidayath-khan/Mini-Vulnerability-Scanner

AI-powered web application vulnerability scanner: crawl, 21-category rule detection, AI false-positive reduction, PDF/Markdown reports - illupak/ai-vuln-scanner