MCP server: SSRF-guarded web/JSON fetching for AI assistants. IP-class validation, 2MB cap, 20s timeout. - asd369932/web-fetch-mcp

CVE-2026-57973 is a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the Microsoft Windows Subsystem for Linux (WSL2) that allows an authorized local attacker to perform tamper...

Cross-platform pure-Rust toolchain for unlock-free temporary root and KernelSU late-loading on vivo/iQOO devices (CVE-2026-43499) - L-1124/RootMyVivo-rs

Reflected XSS scanner with reflection context classification. Python 3, zero dependencies. - mizazhaider-ceh/pentrix-xss

Deliberately vulnerable banking web app — a CTF / pentest lab. PHP + MySQL in Docker, admin session takeover via stored XSS, Puppeteer bot. - RataDarius/bank-app

Network penetration testing extension for Burp Suite - port scanning, service fingerprinting, vulnerability checks, credential testing - dotbiru/network-pentest

Contribute to cymetrics/burp-es-logger development by creating an account on GitHub.

A complete guide and workflow for integrating Agile sprints with DevOps CI/CD pipelines. - techupdate24/fortimail-zero-day-cve-2026-104286

A local-only OWASP Top 10 training lab with intentionally vulnerable exercises in SQL injection, cross-site scripting (XSS), broken access control, and 7 more vulnerabilities, featuring PHP, JavaSc...

AdaptixC2 Windows x64 agent focused on EDR evasion - position-independent beacon (C/NASM, no CRT, single .text section) with encrypted sleep, indirect syscalls, hardware-breakpoint hooking, and mal...

Contribute to kevenpanchal/CVE-2025-24801-GLPI-10.0.17-and-prior-Authenticated-RCE development by creating an account on GitHub.

Exploitability PoC for CVE-2026-102-268 (PyJWT Asymmetric-PEM detection bypass). - covepseng/cve-2026-102268-poc

利用CVE-2025-45737漏洞，实现提权. Contribute to Shinn-Home/CVE-2025-45737 development by creating an account on GitHub.

Exploited a known RCE vulnerability (PHP-CGI Argument Injection, CVE-2012-1823) on Metasploitable2 using Metasploit Framework, gained a shell, and documented post-exploitation - mujtaba815/metasplo...

Exam-grade reflected-XSS fuzzer: threaded, grep-filter, Burp-aware, auto-detect. Python, zero dependencies. - mizazhaider-ceh/XSS-Hunter

CVE-2026-42589 & CVE-2026-40281 - GotenBerg. Contribute to codeb0ssx/CVE-2026-42589xCVE-2026-40281-PoC development by creating an account on GitHub.

dsh (DeepSeek Harness) 逆向 agent skill 家族：Ghidra headless daemon + 分诊/脱壳/静态/漏洞/动态/流量/安卓七场景 | Reverse-engineering agent skills: triage, unpacking, decompile, pwn audit, pcap forensics, APK analysis -...

NetScaler CTX697096 Threat Hunt Helper (IoC scanner) - CVE-2026-88771, CVE-2026-88772 - orjanj/netscaler_threat_hunt_helper

Unauthenticated RCE in Yamcs mission control via YAML injection in reconfigureInstance() - MRdark-ops/CVE-2026-55559

SPA en JavaScript vanilla: perfiles sensoriales para niños neurodivergentes, e-commerce con carrito persistente y monitor IoT simulado. Renderizado seguro sin innerHTML (anti-XSS). - jocelin-portaf...

Gotenberg 8.30.1 unauthenticated RCE exploit. Contribute to MRdark-ops/CVE-2026-40281-exploit development by creating an account on GitHub.