Short editorial updates from published cybersecurity tools.
fankh/vulnerability-pocCVE proof-of-concept labs, exploit scripts, and detection/prevention rules (Nginx, Apache, Snort, YARA) for high-severity CVEs. Authorized security…
x1nons/claude-xml-injectionTechnical disclosure: Credential fabrication via XML tag injection in Claude Sonnet 4.6. Reported June 14 2026, patched June 18 2026.
paulsec/api-dnsdumpster.comPython client for dnsdumpster.com to retrieve DNS records, subdomains, and network maps for reconnaissance and security research.
bunnybuzz/enigmaNative C++ reverse-engineering engine with disassembly, decompilation, and analysis pipeline for PE/ELF binaries, featuring interactive GUI and…
qubesos/qubes-secpackCurated repository of Qubes OS security bulletins, canaries, PGP keys, and ISO digests, with authenticated verification via git tags and detached…
stephanev/risk-analysis-editorBrowser-based risk analysis editor for building risk matrices, risk registers, and action plans. Supports EBIOS RM, ISO 27005, and CNIL DPIA with…
gmh5225/awesome-web3-securityA curated list of Web3 Security materials and resources for Pentesters and Bug Hunters.
wattocyber/oscp-notes-2026OSCP field notebook: merged technique vault and numbered notes. MIT.
wattocyber/custom-oscp-toolingOSCP-focused toolkit for read-only network, SMB, AD, DNS, web, and database enumeration; privesc scanning, hash identification, and…
wattocyber/agentic-dm-gatewaySecurity control plane for LLM agents: allowlists, owner kill switch, PIN sessions, rate limits, prompt-injection detection, and output scrubbing to…
wattocyber/detection-defense-libraryDetection-engineering reference mapping Windows, cloud, container, identity, and ICS attack classes to Sigma rules, trust-boundary models, BYOVD…
theretardedelon/gpewebdefenderLightweight web-attack monitor. One Go binary + SQLite. Not OSSEC, not a WAF.
