CVE-2026-64638: XSS2Shell Proof-of-Concept — Whitebox Pentesting - madfxr/xss2shell-poc

Click2Shell: Preauth WordPress Core Theme Preview Injection to RCE Chain - madfxr/click2shell-poc

Indirect Prompt Injection to RCE (CVSS 10.0) — XSS primitive escalates to arbitrary command execution via AI agent. CAN-2026-2036559. Full exploit chain. PoC advisory. - FUNFACTOR1/ArchiveBox-RCE-E...

Automate Netlogon CVE-2026-41089 validation and defensive testing through integrated AI security workflows, enabling rapid risk assessment and mitigation verification. - Gillarchnganasan2735/CVE-20...

Contribute to rmhowe425/POC-CVE-2026-93680 development by creating an account on GitHub.

Explore and validate CVE-2026-42978 PoC with an integrated AI security tool, multi-protocol terminal, and autonomous agent suite for Windows Push Notifications. - coactionbrittlemaidenhair51/coacti...

Exploit and analyze CVE-2026-42978 with a Windows Push Notifications module for AI security, multi-protocol terminal, and autonomous agent suite. - coactionbrittlemaidenhair51/CVE-2026-42978-PoC-Re...

Hands-on malware analysis and reverse engineering lab using YARA, Sigma, Ghidra, PEStudio, Detect It Easy, and Wireshark to perform static analysis, extract IOCs, develop detection rules, and docum...

**NetSentry** — A lightweight, dependency-free Bash port & vulnerability scanner. Checks a target host against common exploited ports (FTP, SSH, Telnet, SMB, RDP, VNC, etc.), grabs service ...

POC-CVE-2026-93674 Authenticated Blind command injection proof of concept exploit code - rmhowe425/POC-CVE-2026-93674

Reflected Cross-Site Scripting (XSS) in HTML Context - itzumaz/Day-22--Reflected-Cross-Site-Scripting-XSS-in-HTML-Context

Automate, monitor, and secure your infrastructure with Loki Agent—the lightweight DevOps copilot that streamlines workflows and boosts deployment efficiency. - Impeded-seth4314/loki

面向教学场景的轻量化Web安全攻防实训平台，集成常见Web漏洞复现环境与基础防护验证模块，适合课程作业、新手入门安全攻防实操练习。 - X1ngHe159/WebSafetyAttack-DefensePlatform

Network recon & vulnerability-scanning MCP server for the Whitehorse cluster agent (nmap/nuclei/sslscan; detection only) - nullable-eth/mcp-netscan

HPLIP < 3.26.6 — Full admin takeover via PAPPL web interface (no auth). Related to CVE-2026-91097 through CVE-2026-91106 (CVSS 9.3) - Nxploited/CVE-2026-91097-CVE-2026-91106

CVE-2026-28576 (GHSA-ph86-9mcx-3p6r) — Android Contacts Provider SQL Injection via targetSdk-gated ENFORCE_STRICT_SQL_CHECKS. Zero-permission boolean-oracle PoC + Red Team app with consent-gated da...

世界技能大赛云计算项目备赛 · Terraform IaC 模板 + 安全加固脚本 + 排错记录. Contribute to CZC-Max/cloud-competition-prep development by creating an account on GitHub.

The async job contract fal.ai, Black Forest Labs and RunPod each arrived at independently, as one hardened reference server: submit, poll, webhook. Idempotency keys that survive a restart, SSRF-gua...

pentest_rs(agent plugin 层):五域 skill(资产侦察/漏洞扫描/漏洞利用/后渗透操作/攻击产物分析)+ rs-scripting 创作技能,教 agent 使用并按需编写沉淀 rust-script 脚本。执行层在 raystyle/prs_workspace(pdt = Pentest Development Toolkit)。仅限合法授权测试。 - rayst...

代码检测漏洞工具. Contribute to Ms-liyc/deepopen development by creating an account on GitHub.

A Python-based web vulnerability scanner for authorized security assessment and automated detection of common web application security issues. - jigyasagarg08/web-vulnerability-scanner