Burp Suite extension for generating CSRF Proof-of-Concepts for educational and authorized security testing. - KLZer0/CSRF-PoC-Generator

CVE-2026-97163 PoC: Joomla UP (lomart.fr) unauthenticated GitHub mini-install / remote action deployment (≤6.0.29). Detects plugin version, probes com_ajax install triggers. Fix: UP 6.1.0 / 5.2.1. ...

CVE-2026-97161 PoC: Joomla UP (lomart.fr) unauthenticated path traversal / arbitrary file read via ajax-view (≤6.0.29). Fingerprints plugin, probes configuration.php. Fix: UP 6.1.0 / 5.2.1. https:/...

Frontend vulnerabilities cheatsheet — sink, payload and fix for each hole, tagged with its CWE - dragunovartem99/vulns

Una Storiografica degli sviluppi dei diversi nuclei di Potere presenti e operanti in Italia dal 43' al 2000, basato su fonti pubbliche e di gruppi informatici come Strano Network. - Jasssbo...

⚡ 71ZK1 — One command from subdomain to vulnerability findings. subfinder → httpx → nuclei, automated. - 71ZK1/71zk1

A vulnerability scanner built with Python. Contribute to yilmaz8596/vulnerability_scanner development by creating an account on GitHub.

AcyMailing Enterprise for Joomla < 11.1.0: POP3 mailbox actions save MIME attachments without extension checks to media/com_acym/upload/, enabling RCE when an attacker can email the monitore...

Single-node Nutanix Enterprise AI 2.8 PoC installer for an existing Ubuntu 24.04 VM (Ansible only, hypervisor-agnostic) - marco-fabbri/nutanix-enterprise-ai-poc

CVE-2026-97163 PoC payload (UP plugin Joomla remote code installation) - qeize/cve-2026-97163-payload

CVE-2026-82901 PoC: WordPress Ultra Addons for Contact Form 7 ≤3.5.50 unauth file upload via signature field when PDF Generator is enabled → wp-content/uploads/uacf7-uploads/. Fix: 3.5.51+. https:/...

Automated Multi UAC BYPASS for win10|win11|win12-pre-release|ws2019|ws2022 - x0xr00t/Automated-MUlti-UAC-Bypass

Automated batch triage and malware pre-filtering engine. Features Magic Byte masquerading detection, ephemeral archive unpacking, O(1) chunked hashing, and behavioral YARA scanning. - edmasceno/sal...

Contribute to sqkBpI7t/webshell_seo_0day development by creating an account on GitHub.

Contribute to MDhlzG0b/webshell_seo_0day development by creating an account on GitHub.

Multi-SDR RF landscape surveying tool: sweep, dwell, decode, and generate ssrf-lite candidate evidence - Chicago-Offline/rf-survey

Cloud threat hunting and exploitation simulation on AWS infrastructure. Demonstrated real-world compromise vectors including S3 public access exposure, credential exfiltration via IMDSv1 Server-Sid...

A beginner Python cybersecurity project that scans authorized hosts for open TCP ports and performs basic web security checks. - billkot/python-vulnerability-scanner

snapshot of spring-petclinic/spring-petclinic-microservices at a pinned commit, for cross platform ci legs - osflaky/exp-spring-petclinic-spring-petclinic-microservices

A modular C2 Framework developed during my final year cyber project at KIIT, featuring DNS/GitHub communication channels, custom agent modules, and a dual GUI/CLI interface - sampadghosh31/C2-Frame...

Burp Suite extension to bypass WAF by injecting junk data into HTTP requests. V2 adds auto-inject for Active Scanner/DAST, supports JSON/XML/multipart/CSV/YAML/GraphQL. Based on assetnote/nowafpls ...