HTML5 parser internals from scratch: insertion modes, the stack of open elements, the foster-parenting algorithm, and how it enables mutation XSS. - Robert-Doe/foster-parser

Rapidly Search and Hunt through Windows Forensic Artefacts - WithSecureOpenSource/chainsaw

Professional TryHackMe SuperSecretTip walkthrough covering source-code disclosure, XOR secret reconstruction, SSTI, RCE, Linux lateral movement, PATH hijacking, cron abuse, and root-context curl co...

Vulnerability scanner CLI: scans OS packages (RPM, DPKG, APK), OSS dependencies (PyPI, npm/yarn/pnpm, Go, Composer, Maven, Gradle, JAR), and Docker images for known CVEs via the heretix API, emits ...

A modular offensive security framework written in Rust, designed for authorized penetration testing and red team operations. - G4sp4rCS/C2R2-v2

This project proposes a novel framework for predicting vulnerability exploitability using dynamic datasets and optimized scoring mechanisms. - sounthararajan2/DYNAMIC-DATA-UPDATES-AND-WEIGHT-OPTIM...

Studio tecnico e PoC della Stored XSS non autenticata nei commenti di WordPress 7.1, corretta in WordPress 7.1.1. - Federico1976/wordpress-7.1-comment-stored-xss

Burp Suite extension for importing saved Request/Response XML items back into the Site Map. - 0xBrAinsTorM/Burp-Save-Item-XML-Importer

WordPress Core <= 7.1.1 unauthenticated LFI to RCE - validation lab, PoC, nuclei template (GHSA-7hp8-65ch-5whp) - Hassham1/CVE-2026-87902

Contribute to MonicaMuthu/Malware_Detector-YARA_Rules- development by creating an account on GitHub.

cve-2026-86060 PoC. Contribute to digiprosec/MicroTrick development by creating an account on GitHub.

▎ Fleet-evaluation harness for security-agent benchmarks (CyberGym-E2E, ExploitGym), run in real disposable Daytona sandboxes per trial — with Modal-based KVM-capable sandboxes planned for kernel-...

CampaignHub DOM XSS CTF lab. Contribute to arslanben/campaignhub-lab development by creating an account on GitHub.

AI-assisted remote code execution testing framework - command injection, SSTI, deserialization, JNDI/Log4Shell and file upload, planned and adapted per request. - CypherNova1337/VoidStrike

CVE-2026-94545 / GHSA-vcvr-r3jv-pc5j — Next.js next/og ImageResponse SVG injection (Satori, GHSA-wx4j-mvgx-mqwp): isolated Docker validation lab with vulnerable (16.3.5) vs patched (16.3.6) control...

CVE-2026-87902: PoC for WordPress's critical path traversal - bhideki/CVE-2026-87902

give me jsut what i need to paste in discription A lightweight vulnerability scanner designed to detect common security flaws, open ports, and system misconfigurations. - saivardhanlingam1-art/Vuln...

Hands-on manual penetration testing and Proof-of-Concept (PoC) exploitation framework targeting OWASP Top 10 vulnerabilities (SQLi, XSS, CSRF, Path Traversal) via advanced payload injection and DOM...

CVE-2026-89274 — WP Recipe Maker <= 10.8.1 arbitrary shortcode execution via rating-comment reviewBody (CVSS 9.1): Docker validation lab with vulnerable (10.8.1) vs patched (10.8.2) controls...

A technical vulnerability lab modeling unvalidated user input vectors, remote code execution (RCE) flaws using eval(), and structural string sanitisation fixes. - steelo-cmg/Source-Code-Auditing-Lab