Malware Static & Dynamic Triage Pipeline - PE Header Parser, Shannon Entropy & YARA Engine - toprakahmetaydogmus/05-sandbox-malware-triage

Full Firefox chain: CVE-2026-2796 wasm type confusion -> content-process RCE, plus CVE-2026-2768 parent-process escape analysis (both fixed in Firefox 148) - SneakyNachos/CVE-2026-2796-and-C...

Exploit for KeyCloak CVE-2026-18963. Contribute to Snizi/CVE-2026-18963-Exploit development by creating an account on GitHub.

vulnerability scanner project based on Greenbone Community Edition (OpenVAS) - jordobe/vulnscaner

Secure Verse 🛡️ | SIH 2026 Submission by Team Septora. An enterprise-grade, automated vulnerability scanner that translates complex OWASP & network threats into actionable, readable reports...

A responsive and accessible End-to-End Frequent Flyer Portal built with React, Vite, and Tailwind CSS. Features include real-time form validation, flyer search, XSS input sanitization, loading stat...

CVE-2026-19478: GitLab GraphQL Vulnerability PoC. Contribute to n0xdaemon/cve-2026-19478 development by creating an account on GitHub.

Controlled PoC: consumer workflow demonstrating mutable-tag action RCE (authorized self-owned sandbox) - venkatchalla06/poc-mutable-action-consumer

Controlled PoC: composite action for demonstrating mutable-tag supply-chain RCE mechanism (authorized self-owned sandbox) - venkatchalla06/poc-mutable-action-demo

This python script exploit the vulnerable marimo /terminal/ws endpoint and returns a interactive shell. - dodeepsink/CVE-2026-39987.py

Lightweight C2 agent simulation framework for red team adversary emulation & offensive security research. Demonstrates basic C2 callback patterns for SOC monitoring, custom TCP packet frami...

CVE-2026-18366: Events Manager < 7.4.1 — Unauthenticated Privilege Escalation to Administrator. Write-up and proof-of-concept (poc7.py). - ghostpels/CVE-2026-18366

Fileless shellcode dropper in C++ using WinINet API. Downloads and executes shellcode in-memory without touching disk. Educational purposes only. - Segaotava/havoc-fileless-dropper

The project studies how antivirus engines detect shellcode and develops obfuscation techniques to evade them, then measures how successfully these modified payloads bypass detection in an isolated ...

A modular Web Application Vulnerability Scanner built with Python. Features HTTP header analysis, directory fuzzing, custom payload injection for SQLi/XSS detection, and automated reporting. Design...

Autogenerate YARA rules from collections of similar files - jhumble/sigmaker

Proof-of-concept for CVE-2026-18315 (TrueBooker WordPress Plugin): Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover - nastar-id/CVE-2026-18315-PoC

a walkthrough of all six levels of flaws.cloud — aws s3, ebs, imds and iam misconfigurations, and how they chain into a full account compromise - Elnimo-00/cloud-infra-pentest

Web access skills for Prime Agent: multi-backend search (Gemini grounding, Tavily, Brave, Serper, Exa, SearXNG, DuckDuckGo) and SSRF-guarded page fetching with HTML-to-markdown and PDF extraction -...