zizmor

🌈 zizmor zizmor es una herramienta de análisis estático para sistemas CI/CD. Puede encontrar y corregir problemas de seguridad en configuraciones comunes de CI/CD, incluyendo GitHub Actions, Dependabot y pre-commit. Algunas de las cosas que zizmor encuentra:...

BurpSuite-collections

Burp-Suite-collections Colección de proyectos relacionados con BurpSuite, principalmente plugins que no están en BApp Store tienda ¡Toda la localización o uso de BurpSuite se realiza bajo la premisa de que tienes configurado el entorno Java correctamente! Tutorial relacionado La última versión...

gha-lab-25b7988758

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of live-codes/livecodes at commit...

gha-lab-b16a4f3554

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of qgis/QGIS at commit...

gha-lab-7927d7d06f

Purpose server/ provides a local backend FastAPI + PostgreSQL to achieve complete separation between local and cloud environments. After deploying this service, sensitive data such as user registration, model provider configurations, tool settings, and chat history are stored on your machine and...

gha-lab-a7f6217d26

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of wp-graphql/wp-graphql at commit...

awesome-cybersecurity-resources

awesome-cybersecurity-resources Awesome Cybersecurity Resources, more. Purpose This repository stores curated cybersecurity resources gathered from the internet, repository documentation, and selected local notes. The canonical format is: one resource per Markdown file YAML frontmatter as the...

red-kube

Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...

exploitarium

https://discord.gg/WytKH65ZR join up for research, help, documentation, and more useful information for those interested. Statement This repo was incomplete when published. In regard to AI usage, my fuzzing workflow was automated by AI with a strict workflow. I used GPT-5.3 for ALL the fuzzing, a...

webshell-analyzer

Web Shell Analyzer Web shell analyzer is a cross platform stand-alone binary built solely for the purpose of identifying, decoding, and tagging files that are suspected to be web shells. The web shell analyzer is the bigger brother to the web shell scanner project...

gha-lab-b5c1313658

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of eclipse-theia/theia-website at commit...

vulnerability-spoiler-alert

Alerta de Spoiler de Vulnerabilidad Conoce los parches de seguridad antes de que se publique el CVE. Ver sitio en vivo | Suscribirse vía RSS Un centro de monitoreo que observa repositorios de código abierto populares y utiliza IA para detectar cuándo los commits están parcheando vulnerabilidades ...

PcapPlusPlus

...

CVE-2026-59283

A flaw was found in Spring Framework. Applications that evaluate Spring Expression Language SpEL expressions using SimpleEvaluationContext may be vulnerable to a safety guard bypass when the SpEL expression compiler is active. This could allow an attacker to circumvent security restrictions,...

PoC-AutoSync

🧠 PoC-AutoSync-Github Automatically collects public Proof-of-Concept PoC exploits from poc-in-github.motikan2010.net and keeps the database up to date with automatic updates. Use responsibly — for research and defensive purposes only. Inspired by nomi-sec/PoC-in-GitHub. 🔍 Overview This repository...

gha-lab-ca4fa82ac5

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of mesa/mesa at commit...

React2Shell-PoC

React2Shell-PoC Una explotación de prueba de concepto para CVE-2025-55182 y CVE-2025-66478 , vulnerabilidades críticas de ejecución remota de código en React Server Components RSC y aplicaciones Next.js. Resumen React2Shell demuestra la explotación de deserialización insegura en los manejadores d...

ics-forensics-tools

ICSpector: Microsoft ICS Forensics Framework Microsoft ICS Forensics Tools framework is an open-source forensics framework that enables the analysis of Industrial PLC metadata and project files. The framework provides investigators with a convenient way to scan for PLCs and identify any suspiciou...

tun2socks

Features Universal Proxying : Transparently routes all network traffic from any application through a proxy. Multi-Protocol : Supports HTTP/SOCKS/Shadowsocks/SSH/Relay proxies with optional authentication...

CVE-2022-1329

CVE-2022-1329 The Elementor Website Builder plugin for WordPress is vulnerable to unauthorized execution of several AJAX actions due to a missing capability check in the /core/app/modules/onboarding/module.php file that make it possible for attackers to modify site data in addition to uploading...