Takes a PID, injects Meterpreter shellcode into PID process, and execute it // using a remote thread. Windows x64 - cristian17cruz/shellcodewithPID

Lab vulnerável (Docker) + PoC Python para a CVE-2026-87902 — path traversal não autenticado no WordPress Core (page-template -> LFI -> RCE condicional). Uso educacional/autorizado. - ...

CVE-2026-79417 PoC. Contribute to connorjaydunn/CVE-2026-79417 development by creating an account on GitHub.

Contribute to marcoarc01/seminario-owasp-xss-lab development by creating an account on GitHub.

An automated Python tool to scan web applications for common security vulnerabilities (XSS & SQL Injection).⁠ - HafidaElkharraz404/web-vulnerability-scanner

Self-contained, policy-aware recon and hunting pipeline for bug bounty. Proves findings before it alerts you. - BshTaha/bb-toolkit

Contribute to AthBe1337/CVE-2026-43499-poc development by creating an account on GitHub.

Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. F...

Enterprise Python Vulnerability Scanner : An automated network security scanner built with Python and Nmap APIs to perform target reconnaissance, identify service misconfigurations, and generate s...

This repository contains information and updates on the VectorFreed vulnerability chain. - rafabd1/VectorFreed

Contribute to lzty/CVE-2026-94128 development by creating an account on GitHub.

Modular red team automation framework with plugin architecture. Recon, enumeration, exploitation, post-exploitation, reporting modules. MITRE ATT&CK mapping. Phase 3 portfolio project. - ka...

Defensive vulnerability localization daily driver around Antares — keyless operate + fixture/live locate → SARIF. Not a Cisco product. Localization ≠ exploitability. - pandeyaby/ZERODAY

Web vulnerability scanner with an interactive CLI, HTTP security header analysis, technology detection, low-impact SQLi heuristics, directory discovery, reports, and Spanish/English support. Create...

Roundcube virtuser_query pre-auth SQLi (CVE-2026-48842). Python PoC — version detect, virtuser plugin, login probe. https://pocbit.org - murrez/CVE-2026-48842

Roundcube virtuser_query pre-auth SQLi (CVE-2026-48842). Python PoC — version detect, virtuser plugin, login probe. https://pocbit.org - pocbit/CVE-2026-48842

ROP chain filter & shellcode helper for exploit developers — built for OSED/OSCE3 - Tendarkness/roprop

This contains a number of shell functions that may be of use. The intention is for the root of this repository to be cloned to an area in a user's home directory. Then `shellFunctionSetup.s...

Contribute to nikul0022/Penetration-Test-SNMP-Exploitation-on-Windows-Server-2008-R2 development by creating an account on GitHub.

Professional TryHackMe Smol walkthrough documenting WordPress enumeration, jsmol2wp LFI, wp-config disclosure, PHP backdoor analysis, RCE, reverse-shell access, credential-based lateral movement, S...

Hands-on cybersecurity CTF labs covering SQL injection, SSRF, XSS, MITM, race conditions, path traversal, authorization bypasses, OS command injection, and authorized network security testing. - si...