CVE-2026-36130
cwjchoi01/cve-2026-36130Proof-of-concept demonstrating a vulnerability that disables Microsoft Defender (MsMpEng.exe) by locking a folder and rebooting, with screenshots…
defensive-toolsexploitationincident-response+2
cwjchoi01/cve-2026-36130Proof-of-concept demonstrating a vulnerability that disables Microsoft Defender (MsMpEng.exe) by locking a folder and rebooting, with screenshots…
mystuffyt/cve-2023-38831-pocProof-of-concept demonstrating CVE-2023-38831, a WinRAR path traversal vulnerability, by crafting a malicious ZIP archive that executes arbitrary…
vineet7800/cpanel-malware-cleaner-cve-2026Detects and removes malware, botnets, and webshells from cPanel servers, mitigating CVE-2026-41940 and related RCE vulnerabilities with one-command…
theexploiters/cve-2024-42845-exploitExploit For: CVE-2024-42845: Remote Code Execution (RCE) in Invesalius 3.1
llgsjsm/cve-2026-3008Technical analysis and proof-of-concept for CVE-2026-3008, a format string injection in Notepad++ 8.9.3 via nativeLang.xml, enabling denial of…
perl-code/cve-2026-5000Proof-of-concept demonstrating a Windows Defender bypass technique for CVE-2026-5000, intended for controlled testing and defensive research.
volatilityfoundation/communityCommunity-maintained Volatility plugin collection for memory forensics, extending memory dump analysis with modules for malware and process…
misp/misp-objectsCurated JSON object templates that define MISP attributes and relationship types for structured threat intelligence sharing and interoperable IOC…
1rhino2/fnprintmatch functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.
gmh5225/antikerneldebug-pocPOC about how to detect windows kernel debug by pool tag.
talha-nazeef-ahmed/alpc-enumeratorA Windows userland tool to enumerate and classify ALPC ports, including PPL-protected processes.
eset/wslink-vm-analyzerWslinkVMAnalyzer is a tool to facilitate analysis of code protected by a virtual machine featured in Wslink malware
oalabs/hashdbAssortment of hashing algorithms used in malware
immersive-labs-sec/bruteratel-detectiontoolsA collection of Tools and Rules for decoding Brute Ratel C4 badgers
reecdeep/hivev5_keystream_decryptorbad stuffs by bad guys
gendigitalinc/iocThreat Intel IoCs + bits and pieces of dark matter. Published by Gen Threat Labs.
zxgio/ghidra_stack_stringsA script to detect stack-strings by using emulation (leveraging Unicorn)
nozominetworks/upx-recovery-toolAutomates repair of malformed UPX headers in ELF binaries, restoring magic, filesize, blocksize, and overlay fields so standard unpackers can process…