Unauthenticated LFI and conditional RCE scanner for CVE-2026-87902 in WordPress Core (4.7.0 – 7.1.1). - langz337/CVE-2026-87902

CVE-2026-67279 + CVE-2026-86060 – MikroTrick MikroTik RouterOS SSH Pre-Auth Takeover (CVSS 9.2) | Red/Blue Team suite. 2 tools: Full Exploit (rekey bypass, fd-2 policy swap, full-admin shell, plant...

A simple educational vulnerability scanner for identifying common security issues and generating a basic vulnerability report. - niharikasidagam4-ux/vulnerability-scanner

Unauthenticated SQL injection PoC and vulnerable lab environment for WP2Shell (CVE-2026-63030 + CVE-2026-60137) — a WordPress REST API batch route confusion chained into a WP_Query SQL injection. I...

OSINT 监控平台：多源公告推送 / Telegram 对话桥接 / 工具供应与 MCP / MITM 漏洞日报 - drusillawilson4341-beep/osint-monitoring-platform

Cybersecurity learning notes & lab walkthroughs: OWASP Top 10, China MLPS 2.0 (等保 2.0), security device deployment map, DVWA vulnerability reproduction| 网络安全学习笔记与靶场复现记录：OWASP Top 10、等保 2.0、...

Contribute to 25-THEBEaST-25/xss-input-checker development by creating an account on GitHub.

CVE-2026-43805 IOKit IODMACommand race analysis and proof of concept - tls456/CVE-2026-43805-PoC

Contribute to kirankumarhm/springboot-config-server-external-properties-demo development by creating an account on GitHub.

Contribute to Alexandertanay/jenkins-cve-2024-23897-lab development by creating an account on GitHub.

Force enable weekly linux trim for USB to SATA cable - xidecvlt1/debian-usb-trim-bypass

Proof of concept for a GitHub Actions script-injection RCE in smartcontractkit/chainlink's CI (golangci-lint composite action) - Salty43/chainlink-ci-poc

Contribute to gabrielhusa0-hash/Lab-DOM-XSS-in-document.write-sink-using-source-location.search-inside-a-select-element development by creating an account on GitHub.

Web vulnerability scanner built with Next.js for detecting and analyzing common security issues. - asim008a/vuln-scanner

Terraform-deployed red team operator lab on AWS: Mythic, Sliver, and Adaptix C2 behind a production-style Apache redirector, with Kali/Windows hosts and a Guacamole portal. Built for authorized tra...

A quick and dirty extension for Sliver C2 to retrieve the most recent data from a Windows host's clipboard. - HackerForceDev/getclipboarddata

Vanilla JavaScript Adoption Interest Queue for Animal Shelter staff, with validation, search, loading states, accessibility, and XSS-safe data handling. - ChristianCodeSoul/animal-shelter-adoption-...

Demo project wiki source. Contribute to tphilll/openwiki-ssrf-poc development by creating an account on GitHub.

A Burp Suite extension that turns a copied `curl` command into an HTTP request and opens it in Repeater. - premlingayat/curl_to_repeater

A Burp Suite extension for detecting path traversal / local file inclusion (LFI) issues in web applications. - premlingayat/PathTraversalScanner

Conducted an authorized OWASP web application vulnerability assessment against an intentionally vulnerable sandbox application. Tested SQL Injection, Reflected and Stored XSS, and BOLA/IDOR vulnera...