Contribute to nothingnhm/xss-poc-test development by creating an account on GitHub.

A Python-based network vulnerability scanner using Nmap to identify open ports and potential vulnerabilities. - Logeshwaran-bit/network-vulnerability-scanner

A lightweight, asynchronous Command & Control (C2) framework built with Python, FastAPI, and NiceGUI, featuring secure AES-GCM encrypted communication for ethical hacking labs. - Cyb3rPh4nt...

Unauthenticated account takeover PoC for TranslatePress Multilingual <= 3.3.1 (WordPress) - ghostpels/CVE-2026-19632

A web vulnerability scanning tool written in Python for checking already known website Vulnerabilities - ng-sudo/web-Vulnerability-Scanner

Complete walkthrough for the TryHackMe Ignite lab, detailing Fuel CMS 1.4.1 Remote Code Execution (RCE) exploitation and Linux Privilege Escalation. - HackerRank7/TryHackMe---Ignite-Writeup

cve-2026-19900-PoC. Contribute to on3sk-0x1/cve-2026-19900-PoC development by creating an account on GitHub.

Vulnerability scanner based on nmap and nuclei. Contribute to trevorcapps/scanner development by creating an account on GitHub.

DOM & reflected XSS scanner with payload mutation and headless-Chrome execution detection (Playwright). - Orest002/XSSPECTER

Contribute to screwz475/100-days-of-yara development by creating an account on GitHub.

A Flask-based PDF security analyzer that uses static analysis, weighted heuristics, YARA rules, and risk scoring to detect suspicious PDF characteristics. - nishchaygaur/pdf-malware-analyzer

Stored XSS in Nagios Log Server 2024R1.3.1. Contribute to skraft9/CVE-2025-29471 development by creating an account on GitHub.

Proof-of-concept exploits for two WildFly RCE paths: pre-authentication CORBA/IIOP deserialization and a Jackson JSON parser bypass. For authorized testing only. - chern0bit/wildfly-rce-poc

Scoped network/log load-generation TUI tool for authorized red-team/blue-team exercises — allowlist-only, audit-logged, marked synthetic traffic. - kawaiipantsu/thugsflooder

Research PoC and write-up for a Dropbox Raw HTML sandbox → OneDrive MessagePort trust-boundary issue, demonstrating OAuth bearer acquisition, authenticated OneDrive access, and cross-account impact...

Intentionally vulnerable Flask apps for learning web pentesting. Covers SQLi, Stored XSS, RCE, Path Traversal, Broken Auth. For educational use only. - romaniks338/vulnflask-lab

A Flask-based web vulnerability scanner for educational, authorized security testing. - dhruvguptaishere4050-creator/web-vulnerability-scanner

Link unfurler API — URL in, OpenGraph/Twitter/favicon metadata out. SSRF-hardened, redirect-aware - v01dst/link-preview-api

PoC: Docker Compose build.dockerfile injection. Contribute to AbdullahAlmutawa/compose-dockerfile-rce-poc development by creating an account on GitHub.

PoC for docker-compose build.dockerfile injection. Contribute to AbdullahAlmutawa/compose-dockerfile-rce-test development by creating an account on GitHub.

Static security analyzer, least-privilege cloud trust policy engine, and zero-prerequisite offensive exploit chain synthesizer for GitHub Actions OIDC workflows. - gamesapeca/gha-oidc-auditor