exploit de RCE (ejecución remota de código) que abusa del endpoint /api/mcp/connect de aplicaciones MCP vulnerables. En concreto, corresponde a CVE-2026-23744 (MCPJam Inspector) y CVE-2026-57124 - ...

Active Scan Timeline Viewer is a Burp Suite Professional extension for reviewing all HTTP traffic emitted by the native Active Scanner. It is not restricted to findings: every Scanner request is li...

Python-based web vulnerability scanner for learning and authorized - touseef-tariq/web-vuln-scanner

A Java-based automated web vulnerability scanner for SQLi, XSS, and Security Headers. - Sana-Arshad535/Web-Vulnerability-Scanner

A deliberately vulnerable Flask web application built on Jinja2 to demonstrate SQL injection and Server-Side Template Injection (SSTI) via nmap, Gobuster, and tplmap to identify and exploit injecti...

夜鹰是用 Python 实现的 Windows 应急响应工具，单文件 EXE，用于主机疑似被入侵后的现场采集：一次采全进程、服务、任务、启动项、账号、外连、日志与 YARA，约 40 秒完成，由规则引擎标为 low 或 suspicious 两档，每条附 risk_reason 供复核。规则可扩展是其主要特征——内置规则固定为 module、risk、reason、when 四段...

PoC and lab reproduction for CVE-2026-88533. Contribute to HEMLOCK-LYK/CVE-2026-88533 development by creating an account on GitHub.

CVE-2026-48908 SP Page Builder (Joomla) unauth RCE suite — authorized testing only - winrarzipsexploit/CVE-2026-48908

A lightweight static-analysis vulnerability scanner for identifying insecure coding choices - soliner01/Squall

An intentionally vulnerable CyberMart storefront for practicing OWASP Top 10:2025 A05 - Injection. Practice SQL injection (product search), stored XSS (reviews), and OS command injection (network d...

Recherches sur les mutated xss au sein du sanitizer de symphony - kibatche/Dom-Explorer-Spaghetti-Edition

Enterprise PoC: Traefik Proxy v3.0+ FQDN Management on Red Hat OpenShift v4.14+ (ROSA / AWS) comparing Traefik CRDs vs Kubernetes Gateway API - nubenetes/traefik-fqdn-management-poc-openshift-aws

CVE-2026-87930 Joomla Multi-CVE RCE suite — authorized testing only - winrarzipsexploit/CVE-2026-87930

CVE-2026-27540 WWLC WordPress unauth upload RCE suite — authorized testing only - winrarzipsexploit/CVE-2026-27540

Stored XSS I found in ZoneMinder during OSCP prep. - Henryisnotavailable/ZoneMinder-1.29.0-Stored-XSS

炸炸酥网安靶场是一款开源 WEB 安全学习平台，包含 80+ 独立靶场，覆盖从 HTTP 协议基础到业务逻辑漏洞的完整学习路径。 - Prohao42/Security-Range-wed

2022计算机毕设一套 终稿 （论文+程序源代码+使用说明)基于django的防一般web漏洞的人事管理系统_911fe0c2-b143-4a6f-938f-09a06ca2da8e.zip - owenbrave/BSOCylvD

PoC for CVE-2026-1961 — command injection in Foreman's WebSocket proxy (lib/ws_proxy.rb) via unsanitized compute resource hostname, leading to RCE as the foreman user. Responsibly disclosed...

Discover and exploit vulnerabilities with automated fuzzing workflows and hand-crafted PoCs for real-world targets. - nisadmrci/exploitarium

A PoC exploit for CVE-2026-32604 - Spinnaker GitRepo Artifact RCE - K3ysTr0K3R/CVE-2026-32604

An APK vulnerability scanner that analyzes Android application packages for security weaknesses, insecure configurations, exposed components, and potential risks, helping developers and security an...