exposed .git → forged session cookie + SSTI RCE → command injection → AD compromise, across a 6-host lab. - MRdark-ops/solarvault-pentest

# Vulnerability Scanner Based on OWASP Top 10. Contribute to gocar112/the-OWASP-Top-10-Vulnerability-Scanner development by creating an account on GitHub.

Context-aware XSS scanner with real browser confirmation, reflection analysis, DOM-sink detection, blind XSS support, and automated reporting for authorized security testing. - pratik-khairnar-sec/...

YARA + Sigma detections from published threat intel — fingerprints only, no live malware handled. Currently: NeedyMantis (T1574.002, T1071.001). - Garylee833/detection-rules

Reproducible Next.js image optimizer DNS rebinding SSRF PoC - rudy128/nextjs-image-optimizer-dns-rebinding-poc

Mission Critical Vulnerability Scanner (MCVS) .NET Action. Create .NET code without high and critical vulnerabilities. - schubergphilis/mcvs-dotnet-action

Web Vulnerability Scanner. Contribute to Shobith15/Web_vuln_scanner development by creating an account on GitHub.

Unauthenticated SQL injection PoC and vulnerable lab environment for WP2Shell (CVE-2026-63030 + CVE-2026-60137) — a WordPress REST API batch route confusion chained into a WP_Query SQL injection. I...

A Simple Vulnerability Scanner is a cybersecurity application that scans a system or website for common security weaknesses. It checks for issues such as open ports, weak configurations, outdated s...

Python Simple Vulnerability Scanner Project. Contribute to chipurupallisandeepsagar12-cloud/Simple-Vulnerability-Scanner-Python development by creating an account on GitHub.

A personal cheatsheet and toolkit for OSWE/AWAE exam prep — Python scripts for blind SQLi, JWT attacks, cookie/session forging, and WebSocket exploitation, plus JS payloads for XSS/CSRF via fetch, ...

多worker运行的CTF、漏洞挖掘的工具. Contribute to do-whilefor/X-Loom development by creating an account on GitHub.

Contribute to gabrielhusa0-hash/Lab-Reflected-XSS-into-HTML-context-with-all-tags-blocked-except-custom-ones development by creating an account on GitHub.

CraftCMS RCE exploit. Contribute to 0xTatsuki/CVE-2026-31857 development by creating an account on GitHub.

将 JavaWeb 课设 (学生成绩管理系统) 作为被测靶系统，基于自研接口自动化框架，落地抓包分析、用例设计、框架适配、越权测试、缺陷排查、回归用例编写的完整接口测试全流程 - S1lenceYYY/student-management-system

MoonBit CLI：以双身份交叉替换对象 ID，回归验证 API 对象级授权（BOLA/IDOR），附本地安全/漏洞演示。 - shen-E/moonauthz-regression

An assortment of YARA rules. Contribute to Sean-dotM/yars development by creating an account on GitHub.

Offensive security toolkit: port scanner, vulnerability assessment, bug bounty recon & red team automation in pure Python. Subdomains, CORS, SSRF, XXE, GraphQL, takeover, WAF detection, SSL...

Fortinet security scanner. Contribute to gotr00t0day/f0rtifall development by creating an account on GitHub.

Detection rules for Splunk and QRadar. Contribute to Kenshi09127/BlueTeam-SIEM-Rules development by creating an account on GitHub.

Burp Suite extension for CORS behavior analysis and PoC generation. - KLZer0/KILL_Zer0-CORS-Analyzer