See why a web vulnerability works, not just how to trigger it — a single-file, zero-dependency security lab that renders a vulnerable app as a 7-layer cross-section. 17 labs, attacker & def...

HTTP network debugging toolset for DeepSeek Harness (dsh): general-purpose HTTP client with SSRF/private-network protection, per-session request history with replay, response inspection, HAR export...

2026： 完整 Coruna 漏洞及 DarkSword 零日（0day）情报. Contribute to dashen666666-gif/DarkSword- development by creating an account on GitHub.

Exploit for CVE-2017-7921, targeting the improper authentication vulnerability affecting Hikvision camera systems. - Th3Purge/CVE-2017-7921-Exploit

Self-hosted web file manager with OIDC auth, Rust backend and Vue frontend. - adamhogle/yet-another-file-manager

⚡ Automated web security reconnaissance & vulnerability assessment tool for bug bounty hunters. Discover attack surfaces, fingerprint technologies, detect common web vulnerabilities, and ge...

CVE-2026-15667 WordPress Event Solution LFI POC. Contribute to cflowsec/CVE-2026-15667 development by creating an account on GitHub.

AI-assisted framework for evidence-based validation of web application vulnerability scanner findings. - Niks2801/AI-web-vulnerability-validation-framework

由夜安团队研发的代码审计平台，涵盖十多种常用语言，提供从上传源代码、审计、靶机验证到生成报告的一站式流程，并最终形成真正可用的 POC。平台致力于发现最真实的漏洞（包括评级与漏洞本身），同时将成本控制在最低水平。在如何平衡成本与发现高危、严重真实漏洞之间，我们将持续探索研究。 - Yean-Sec/StrikeAgent_Coder-Flash

Security advisory: stored XSS via HTML-entity bypass of the dolPrintHTML javascript: filter in Dolibarr <= 24.0.1 (CWE-79, CVSS 8.0) - maidou193-dot/dolibarr-24.0.1-xss

Writeup: Hackcar - DockerLabs (Node.js Inspector RCE + CVE-2025-55182 React2Shell) - iapetus12/hackcar-writeup

Contribute to ZeroDayEvil/CVE-2026-41096-PoC development by creating an account on GitHub.

GitLab CE/EE unauthenticated arbitrary file read (CVE-2026-85706) - PoC - mhtsec/CVE-2026-85706

python web vulnerability scanner built. Contribute to tziatziospanagioths/simple-python-scanner development by creating an account on GitHub.

🔐 Python Vulnerability Scanner A Python-based network vulnerability scanner built with Nmap for authorized security testing, CTFs, and lab environments. - judejacob1027-hack/vulnscanner

OpenPanel Unauthenticated Server-Side Request Forgery (SSRF) - hotplugin0x01/CVE-2026-85612

Repository to support co-development of microscopy image analysis of nuclei as well as objects and structures within them. - lhilbert/Nuclei-And-Inside

CVE-2026-79294 — Stored XSS in Moonshot AI Kimi's HTML artifact Preview, delivered through the public Share view, leading to session token exfiltration and demonstrated account takeover. Re...

Marimo WS Preauth RCE. Contribute to julichaan/CVE-2026-39987_POC development by creating an account on GitHub.

Self-contained SSRF research lab — 7 services, 13 scenarios, 6 bypass techniques, detection rules, and an animated dashboard. All on 127.0.0.1. - het-P301204/spectre-ssrf-lab

Production-grade full-stack URL shortener SaaS with real-time analytics, dynamic QR codes, custom aliases, SSRF security guard, rate limiting, and Next.js 15 App Router. - VinayKrishna-7/Url_shortener