Contribute to zwindler/nodes-proxy-rce-poc development by creating an account on GitHub.

A non-invasive passive scanner that detects two critical WordPress vulnerabilities in a single run, with multi-threaded support for bulk scanning. - CronUp/WordPress-Vulns

Scanner de vulnerabilidades simples. Contribute to newtonfalbo/vulnerability-scanner development by creating an account on GitHub.

divcc: compiler wrapper producing per-device unique binaries via seeded link-order shuffling, so an exploit built on fixed addresses does not carry across a fleet. - IliasSoultana/diversity-poc

Chirp: full-stack social feed demonstrating and defending the complete XSS taxonomy (BCSE320L case study) - Puneesh12/Social-Feed-with-full-XSS-TAXONOMY

JYscan 是GYscan 的 Java 移植版，对应来源为 GYscan 的Go版源码 它是一款面向授权测 试与安全研究的命令行工具箱，侧重资产探测、漏洞检测与安全验证。 - xiguayiqiu/JYscan

Proof of concept for vulnerability CVE-2026-87902 in Wordpress - khellwan/CVE-2026-87902_PoC

Takes a PID, injects Meterpreter shellcode into PID process, and execute it // using a remote thread. Windows x64 - cristian17cruz/shellcodewithPID

Lab vulnerável (Docker) + PoC Python para a CVE-2026-87902 — path traversal não autenticado no WordPress Core (page-template -> LFI -> RCE condicional). Uso educacional/autorizado. - ...

CVE-2026-79417 PoC. Contribute to connorjaydunn/CVE-2026-79417 development by creating an account on GitHub.

Contribute to marcoarc01/seminario-owasp-xss-lab development by creating an account on GitHub.

An automated Python tool to scan web applications for common security vulnerabilities (XSS & SQL Injection).⁠ - HafidaElkharraz404/web-vulnerability-scanner

Self-contained, policy-aware recon and hunting pipeline for bug bounty. Proves findings before it alerts you. - BshTaha/bb-toolkit

Contribute to AthBe1337/CVE-2026-43499-poc development by creating an account on GitHub.

Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. F...

Enterprise Python Vulnerability Scanner : An automated network security scanner built with Python and Nmap APIs to perform target reconnaissance, identify service misconfigurations, and generate s...

This repository contains information and updates on the VectorFreed vulnerability chain. - rafabd1/VectorFreed

Contribute to lzty/CVE-2026-94128 development by creating an account on GitHub.

Modular red team automation framework with plugin architecture. Recon, enumeration, exploitation, post-exploitation, reporting modules. MITRE ATT&CK mapping. Phase 3 portfolio project. - ka...

Defensive vulnerability localization daily driver around Antares — keyless operate + fixture/live locate → SARIF. Not a Cisco product. Localization ≠ exploitability. - pandeyaby/ZERODAY

Web vulnerability scanner with an interactive CLI, HTTP security header analysis, technology detection, low-impact SQLi heuristics, directory discovery, reports, and Spanish/English support. Create...