University Project of developing a template for safely testing for the CVE 2025-24813 on a server. It is intentionally made to not leave any lasting artifacts on the server and does not disrupt its...

Contribute to lepemiran47-png/Stored-XSS-and-Session-Hijacking-Simulation- development by creating an account on GitHub.

A practical XSS lab covering Reflected, Stored, and DOM-based Cross-Site Scripting vulnerabilities, with multiple beginner-friendly scenarios to help learners understand and practice different XSS ...

Stealth focused DNS C2 with Shadow Mesh architecture and malleable timing and payloads for Adversary Emulation. - abb3rrant/Unkn0wnC2

Cyber security and ethical hacking .The project:1password strength Analyzer 2Data encryption and decryption tool 3phishing email simulation 4simple vulnerability scanner - anushree-cyber1/Cyber-sec...

Custom Nuclei templates for IDOR, SSRF, JWT attacks, WAF bypass detection, and secrets exposure - unrandoms/nuclei-bb-templates

Pentesting DVWA across SQLi, XSS, Command Injection, File Inclusion, File Upload, Brute Force, and CSRF — Low to High difficulty - Mahhyya/DVWA-Web-App-Pentesting

Scoped, rate-limited bug bounty recon tooling in Bash + HackerOne report templates - Ngelcondor/bb-recon-toolkit

A GitHub action that can be used to run vulnerability checks using the 10up WP-CLI Vulnerability Scanner - jazzsequence/action-wordpress-vulnerability-scanner

cve-2026-85706-poc-exploit-gitlab. Contribute to 0xlyvio/cve-2026-85706-poc-exploit-gitlab development by creating an account on GitHub.

Contribute to itsanwar/rust-recaptcha-bypass development by creating an account on GitHub.

Burp Suite extension that passively discovers APIs in Proxy traffic and generates OpenAPI 3.1 specifications and Postman collections. - JonsTech/reverse-api-burp

Python PoC for CVE-2026-33439, an OpenAM pre-authentication RCE via jato.clientSession deserialization - infernosalex/CVE-2026-33439-Python-PoC

Contribute to Kyzerz53/Cross-Site-Scripting-XSS- development by creating an account on GitHub.

Automated suspicious-file analysis with Python, ClamAV, YARA, CAPEv2, Sysmon and Wazuh - anaselkarkouri/poc-malware-control

PhishDrill 是一套零第三方依赖的开源钓鱼演练平台:不用搭 C2、不用买商业平台,一台内网机器(甚至一台笔记本)即可完成「发信 → 埋点 → 去伪 → 归因到人 → 报表交付」的完整钓鱼攻防测试,并提供浏览器管理控制台与实时态势大屏。 - haoliyang/PhishDrill

miniOrange 2FA CVE POC. Contribute to cflowsec/CVE-2026-77770 development by creating an account on GitHub.

零依赖 Node 公网蜜罐 + ECharts 实时攻击地图（跑在 OpenWrt 路由器上）. Contribute to viergauls/honeypot-map development by creating an account on GitHub.