Authorization-first vulnerability scanner with service and version detection, CVE/CVSS analysis, CISA KEV prioritization, asset criticality weighting, evidence-based findings, remediation guidance,...

PoC / Exploit for CVE-2025-32463(sudo LPE). Contribute to klvlo/CVE-2025-32463 development by creating an account on GitHub.

Pentest exam write-up (CYBERUS course, Univ. Bretagne Sud): exposed .git → forged session cookie + SSTI RCE → command injection → AD compromise, across a 6-host lab. - kamelisas/solarvault-pentest-...

CVE-2026-8065 PoC: Hitachi Energy RTU500 unauth firmware update bypass (CWE-306, CVSS 9.1). IoT/OT colored check + mass exploit — RTU500 fingerprint, firmware endpoint probe, lab-safe upload test. ...

将扫描的漏洞进行分类管理. Contribute to baby1-ux/- development by creating an account on GitHub.

玄机 —— 纯本地运行的 Windows 桌面安全操作台。工具启动器 × 工作空间 × 命令面板，面向渗透测试/红队工作流。不联网、零上报、无数据库。Electron + Vue3 - EthanJulina/Xuanji

CVE-2026-85520 PoC (PoCbit) — PrestaShop MyPresta gmfeed ≤2.3.9 unauthenticated arbitrary file write via feed.php (Save to file URL) → RCE. check + exploit + mass bulk (--list -j). https://pocbit.o...

CVE-2026-8065 PoC: Hitachi Energy RTU500 unauth firmware update bypass (CWE-306, CVSS 9.1). IoT/OT colored check + mass exploit — RTU500 fingerprint, firmware endpoint probe, lab-safe upload test. ...

Contribute to feixingxuerong123/xss development by creating an account on GitHub.

DVWA deployment on a local Kubernetes cluster with demonstrations of SQL Injection, Command Injection, and Reflected XSS. - vinshriv/dvwa-k8s-demo

exposed .git → forged session cookie + SSTI RCE → command injection → AD compromise, across a 6-host lab. - MRdark-ops/solarvault-pentest

# Vulnerability Scanner Based on OWASP Top 10. Contribute to gocar112/the-OWASP-Top-10-Vulnerability-Scanner development by creating an account on GitHub.

Context-aware XSS scanner with real browser confirmation, reflection analysis, DOM-sink detection, blind XSS support, and automated reporting for authorized security testing. - pratik-khairnar-sec/...

YARA + Sigma detections from published threat intel — fingerprints only, no live malware handled. Currently: NeedyMantis (T1574.002, T1071.001). - Garylee833/detection-rules

Reproducible Next.js image optimizer DNS rebinding SSRF PoC - rudy128/nextjs-image-optimizer-dns-rebinding-poc

Mission Critical Vulnerability Scanner (MCVS) .NET Action. Create .NET code without high and critical vulnerabilities. - schubergphilis/mcvs-dotnet-action

Web Vulnerability Scanner. Contribute to Shobith15/Web_vuln_scanner development by creating an account on GitHub.

Unauthenticated SQL injection PoC and vulnerable lab environment for WP2Shell (CVE-2026-63030 + CVE-2026-60137) — a WordPress REST API batch route confusion chained into a WP_Query SQL injection. I...

A Simple Vulnerability Scanner is a cybersecurity application that scans a system or website for common security weaknesses. It checks for issues such as open ports, weak configurations, outdated s...

Python Simple Vulnerability Scanner Project. Contribute to chipurupallisandeepsagar12-cloud/Simple-Vulnerability-Scanner-Python development by creating an account on GitHub.

A personal cheatsheet and toolkit for OSWE/AWAE exam prep — Python scripts for blind SQLi, JWT attacks, cookie/session forging, and WebSocket exploitation, plus JS payloads for XSS/CSRF via fetch, ...