Repository Index

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

• cve-scanner
• subdomain-takeover
• nuclei-engine
• vulnerability-detection

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

• firewall
• http-flood
• security
• sql-injection

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

• awesome
• awesome-list
• hacking
• search-engine

✍️ A curated list of CVE PoCs.

• awesome
• cve
• poc

The wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS 1.3! Update to wolfSSL 5.9.1 for the latest CVE fixes.

• ssl
• tls
• cryptography
• security

GhostLock One-Tap Execution App (CVE-2026-43499)

A collection of JavaScript engine CVEs with PoCs

• javascript
• cve
• vulnerability

CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.

• cve-2026-109618
• cve-2026-109619
• detection-rules
• exploit

Deep probabilistic analysis of single-cell and spatial omics data

• scrna-seq
• variational-bayes
• variational-autoencoder
• cite-seq

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

• tokenization
• web-security
• compliance
• security

The source code of 'Visual Attribute Transfer through Deep Image Analogy'.

• style-transfer
• deep-learning

🛡️ Free open-source AI-powered security terminal & vulnerability scanner (CVE, SBOM). Supports SSH, SFTP, RDP, VNC, Serial, and 12+ autonomous AI agents (DeepSeek, OpenAI) for automated security workflows, CTF & DevSecOps. Cross-platform & Web UI.

• cve-scanner
• mcp-server
• mcp-tools
• osv

Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.

• cve-scanning
• pentesting-tools
• rust
• vulnerability-scanners

Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.

High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)

Ephemeral root via the CVE-2026-43284 page-cache exploit

🔪Browser logic vulnerabilities :skull_and_crossbones:

• security
• browser
• xss
• vulnerability

Spatial Single Cell Analysis in Python

• single-cell-rna-seq
• single-cell-genomics
• spatial-transcriptomics
• spatial-analysis

AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.

• ai
• attack-surface-management
• bbot
• cybersecurity

RNA Velocity generalized through dynamical modeling

Samsung Tizen root

• embedded-linux
• firmware-analysis
• hardware-hacking
• mali-gpu

Testing chrome extensions with Node.js

• javascript
• chrome-api
• sinon-chrome
• chrome-events

Neo4j client for Golang

Electronic Health Record Analysis with Python.

• scverse
• electronic-health-record
• electronic-medical-record
• ehr