A/B Docker lab + PoC for CVE-2026-32475 (Elementor Pro Forms unauthenticated arbitrary file upload -> RCE via validation/move loop desync) - dinosn/cve-2026-32475-elementor-pro-lab

A PoC and automated version detection/exploit tool for JetBrains TeamCity Authentication Bypass & RCE (CVE-2023-42793). - burakacar6/CVE-2023-42793-TeamCity-Unauthenticated-RCE

Unauthenticated arbitrary file upload -> RCE in WPLP Cookie Consent (gdpr-cookie-consent) <= 4.4.1 - technical write-up and PoC - ghostpels/CVE-2026-75865

Millelith's vulnerability scanner tools. Contribute to Millelith/scanner development by creating an account on GitHub.

Modular, non-destructive web application vulnerability scanner (SQLi, XSS, CSRF detection) with a Bootstrap 5 executive HTML report. - mstnisa/pyvscan

Operational research on the modern multi-stage chain - MalikHettige/desync-saml-orm-ssti-chain

2022计算机毕设一套 终稿 （论文+前后端程序源代码）基于Jboss框架的渗透测试研究_7343e07d-dc1f-43ad-807b-cb4efaff1aa5.zip - boom5497/GaMMFkst

2022计算机毕设一套 终稿 （论文+前后端程序源代码）基于shiro框架的渗透测试研究_e55821e8-81e7-4719-aaf7-abbfc684ba7d.zip - boom5497/VKdQQQXC

Lord Megatron is a 1 click vulnerability scanner. Contribute to d3ath69/Megatron development by creating an account on GitHub.

An interactive, all-in-one Active Directory enumeration and attack framework that unifies Responder, NTLM relay, IPv6 attacks, password spraying, and Impacket tooling into a single guided workflow....

JimuReport 2.5.1 pre-auth RCE: auth bypass via hardcoded X-Sign secret + Aviator expression injection + sandbox escape (CVE PoC) - mhtsec/jimureport-2.5.1-rce

Web 安全漏洞复现实践仓库，记录漏洞原理、环境搭建、完整利用流程与修复方案，基于 Vulhub. Contribute to Qitangwen/vul-study development by creating an account on GitHub.

Automated vulnerability assessment and risk analysis platform with Nmap scanning, CVE intelligence, binary analysis, YARA threat detection, and PDF security reporting - mustafajaved304/VulnX

A utility to obfuscate and encrypt shellcode. Contribute to grit8086/mimic development by creating an account on GitHub.

Blood donor-hospital matching platform: Spring Boot 3, PostgreSQL, Redis GEO matching, RabbitMQ notifications, Quartz escalation jobs, React frontend - Suchetan1265/lifelink

SSRF guard and upstream-transport helpers extracted from BusinessMCP's MCP gateway (MIT) - businessmcp/mcp-gateway

Fast, self-hosted DFIR triage for Windows Event Logs (.evtx): Sigma + YARA + heuristic detections, MITRE ATT&CK, attack chains, and one-click PDF/DOCX reports. - geezsecurity/Vigil-DFIR

Contribute to rufftruffles/malice-yara development by creating an account on GitHub.

Authorized-lab vulnerability scanner (FastAPI + SQLAlchemy) with JWT auth, CVSS v3.1 scoring, SSRF-hardened scanning, and PDF assessment reports. Portfolio project — scan only systems you own or ha...