现代化的websocket渗透测试工具，本身即支持多种websocket漏洞扫描与fuzz方法，同时高级功能支持websocket协议代理为http协议，由coolmoon和guaidao2开发。 - guaidao2/crackws

CVE-2026-61500 Rejetto HFS predictable PRNG session forgery to RCE PoC and Docker lab - aramosf/CVE-2026-61500

Enterprise Malware Intelligence, Dynamic Analysis & Digital Forensics platform - sample/case management, sandbox detonation, YARA/ATT&CK/IOC analysis, threat intel, reporting - Awai...

Browser extension (MV3) for in-browser SQL injection, reflected XSS, and security-header probing — companion to aegis - sourabhbeni/aegis-lens

FirmAudit2 — AI Agent firmware vulnerability audit pipeline, from unpacking to a CNVD-ready delivery bundle. | 从解包到 CNVD 交付总包，一条固件漏洞审计流水线：Agent 负责挖，平台负责把关 —— 八段引导、四道结果门、命令级复现，全程可回放、可校验、可交付 - JiuZer...

Burp Suite Style Mobile Browser Extension. Contribute to sudokage-sh/burp-mobile development by creating an account on GitHub.

CVE-2026-41089 LongLogon: pre-auth CLDAP (UDP/389) stack buffer overflow crasher for unpatched Windows Server 2025 Netlogon (lsass 0xc0000409). Stdlib-only Python PoC + lab write-up. - 1posix/CVE-2...

devops lab exp 5 jenkins. Contribute to vadthyavathcharanteja/exp-5 development by creating an account on GitHub.

A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing unauthenticated attackers to gain root-level WHM access by injecting CRLF sequen...

Exploit Index provides a searchable, version-wise database of High and Critical CVEs across major enterprise products, with Proof of Concept (PoC) exploit links and CISA Known Exploited Vulnerabili...

CVE-2020-14008 - ManageEngine Applications Manager RCE - raflesiait/CVE-2020-14008

Contribute to langz337/CVE-2026-63030 development by creating an account on GitHub.

Burp Suite extension for generating CSRF Proof-of-Concepts for educational and authorized security testing. - KLZer0/CSRF-PoC-Generator

CVE-2026-97163 PoC: Joomla UP (lomart.fr) unauthenticated GitHub mini-install / remote action deployment (≤6.0.29). Detects plugin version, probes com_ajax install triggers. Fix: UP 6.1.0 / 5.2.1. ...

CVE-2026-97161 PoC: Joomla UP (lomart.fr) unauthenticated path traversal / arbitrary file read via ajax-view (≤6.0.29). Fingerprints plugin, probes configuration.php. Fix: UP 6.1.0 / 5.2.1. https:/...

Frontend vulnerabilities cheatsheet — sink, payload and fix for each hole, tagged with its CWE - dragunovartem99/vulns

Una Storiografica degli sviluppi dei diversi nuclei di Potere presenti e operanti in Italia dal 43' al 2000, basato su fonti pubbliche e di gruppi informatici come Strano Network. - Jasssbo...

⚡ 71ZK1 — One command from subdomain to vulnerability findings. subfinder → httpx → nuclei, automated. - 71ZK1/71zk1

A vulnerability scanner built with Python. Contribute to yilmaz8596/vulnerability_scanner development by creating an account on GitHub.

AcyMailing Enterprise for Joomla < 11.1.0: POP3 mailbox actions save MIME attachments without extension checks to media/com_acym/upload/, enabling RCE when an attacker can email the monitore...

Single-node Nutanix Enterprise AI 2.8 PoC installer for an existing Ubuntu 24.04 VM (Ansible only, hypervisor-agnostic) - marco-fabbri/nutanix-enterprise-ai-poc