Command-line web vulnerability scanner for authorized targets - imedkablavi/web-vuln-scanner

Contribute to pradhyu/spring-redis-kryo development by creating an account on GitHub.

Contribute to aacle/burpsuite-complete-mcp development by creating an account on GitHub.

Entry-level SOC portfolio project demonstrating YARA rule development, multi-indicator detection, recursive scanning, false-positive testing and tuning, and SHA-256 collection in a safe REMnux lab....

LuaGB - Game Boy / Game Boy Color emulator for PS5 via Luac0re. fixGB running as userland shellcode, no kernel exploit. - soniciso1/LuaGB

Malware Static & Dynamic Triage Pipeline - PE Header Parser, Shannon Entropy & YARA Engine - toprakahmetaydogmus/05-sandbox-malware-triage

Full Firefox chain: CVE-2026-2796 wasm type confusion -> content-process RCE, plus CVE-2026-2768 parent-process escape analysis (both fixed in Firefox 148) - SneakyNachos/CVE-2026-2796-and-C...

Exploit for KeyCloak CVE-2026-18963. Contribute to Snizi/CVE-2026-18963-Exploit development by creating an account on GitHub.

vulnerability scanner project based on Greenbone Community Edition (OpenVAS) - jordobe/vulnscaner

Secure Verse 🛡️ | SIH 2026 Submission by Team Septora. An enterprise-grade, automated vulnerability scanner that translates complex OWASP & network threats into actionable, readable reports...

A responsive and accessible End-to-End Frequent Flyer Portal built with React, Vite, and Tailwind CSS. Features include real-time form validation, flyer search, XSS input sanitization, loading stat...

CVE-2026-19478: GitLab GraphQL Vulnerability PoC. Contribute to n0xdaemon/cve-2026-19478 development by creating an account on GitHub.

Controlled PoC: consumer workflow demonstrating mutable-tag action RCE (authorized self-owned sandbox) - venkatchalla06/poc-mutable-action-consumer

Controlled PoC: composite action for demonstrating mutable-tag supply-chain RCE mechanism (authorized self-owned sandbox) - venkatchalla06/poc-mutable-action-demo

This python script exploit the vulnerable marimo /terminal/ws endpoint and returns a interactive shell. - dodeepsink/CVE-2026-39987.py

Lightweight C2 agent simulation framework for red team adversary emulation & offensive security research. Demonstrates basic C2 callback patterns for SOC monitoring, custom TCP packet frami...

CVE-2026-18366: Events Manager < 7.4.1 — Unauthenticated Privilege Escalation to Administrator. Write-up and proof-of-concept (poc7.py). - ghostpels/CVE-2026-18366

Fileless shellcode dropper in C++ using WinINet API. Downloads and executes shellcode in-memory without touching disk. Educational purposes only. - Segaotava/havoc-fileless-dropper

The project studies how antivirus engines detect shellcode and develops obfuscation techniques to evade them, then measures how successfully these modified payloads bypass detection in an isolated ...