DOM & reflected XSS scanner with payload mutation and headless-Chrome execution detection (Playwright). - Orest002/XSSPECTER

Contribute to screwz475/100-days-of-yara development by creating an account on GitHub.

A Flask-based PDF security analyzer that uses static analysis, weighted heuristics, YARA rules, and risk scoring to detect suspicious PDF characteristics. - nishchaygaur/pdf-malware-analyzer

Stored XSS in Nagios Log Server 2024R1.3.1. Contribute to skraft9/CVE-2025-29471 development by creating an account on GitHub.

Proof-of-concept exploits for two WildFly RCE paths: pre-authentication CORBA/IIOP deserialization and a Jackson JSON parser bypass. For authorized testing only. - chern0bit/wildfly-rce-poc

Scoped network/log load-generation TUI tool for authorized red-team/blue-team exercises — allowlist-only, audit-logged, marked synthetic traffic. - kawaiipantsu/thugsflooder

Research PoC and write-up for a Dropbox Raw HTML sandbox → OneDrive MessagePort trust-boundary issue, demonstrating OAuth bearer acquisition, authenticated OneDrive access, and cross-account impact...

Intentionally vulnerable Flask apps for learning web pentesting. Covers SQLi, Stored XSS, RCE, Path Traversal, Broken Auth. For educational use only. - romaniks338/vulnflask-lab

A Flask-based web vulnerability scanner for educational, authorized security testing. - dhruvguptaishere4050-creator/web-vulnerability-scanner

Link unfurler API — URL in, OpenGraph/Twitter/favicon metadata out. SSRF-hardened, redirect-aware - v01dst/link-preview-api

PoC: Docker Compose build.dockerfile injection. Contribute to AbdullahAlmutawa/compose-dockerfile-rce-poc development by creating an account on GitHub.

PoC for docker-compose build.dockerfile injection. Contribute to AbdullahAlmutawa/compose-dockerfile-rce-test development by creating an account on GitHub.

Static security analyzer, least-privilege cloud trust policy engine, and zero-prerequisite offensive exploit chain synthesizer for GitHub Actions OIDC workflows. - gamesapeca/gha-oidc-auditor

2022算机毕设一套 终稿 基于web渗透技术的注入漏洞扫描工具及防护方法的研究与实现_（论文+python源代码+可执行文件）1.zip - fireditoo/kQwiFRvb

An automated network vulnerability scanner built in Python. Integrates Nmap for target scanning and service detection, with results persistently logged to an SQLite database managed by Alembic - Em...

A modular Python web-server vulnerability scanner with real-time CVE correlation via a custom reverse-index database. - VIKENNN/FYP2025_

Super elite end-to-end implant 0day. Full kill-chain. Exploit, escalate, pivot, poison, persistence. - abraxas/veneficus

isolation-ring poc html. Contribute to GitWHS/wm-poc-rce development by creating an account on GitHub.

Contribute to Mr-xn/showdoc-registerbyverify-rce development by creating an account on GitHub.

WindBridge 风桥：局域网文件传输、移动端上传与双向文本桥接工具. Contribute to yifanchen12/windbridge development by creating an account on GitHub.

Contribute to rmhowe425/POC-CVE-2026-7873 development by creating an account on GitHub.