Educational cybersecurity vulnerability scanner and security dashboard - mdkaifsiddiquee8/Cyber-Security-Vulnerability-Scanner

CVE-2026-83627 — Hummingbird Performance <= 3.21.0 Unauthenticated RCE. Pure Python exploit. by K52-ai. - K52-ai/CVE-2026-83627

From a web shell to root: escalating privileges on Metasploitable2 by exploiting a misconfigured SUID Nmap binary. - mujtaba815/metasploitable2-privilege-escalation

Hands-on cybersecurity and CTF labs covering service fingerprinting, MySQL enumeration, HTTP clues, SSH discovery, port probing, host discovery, ICA access paths, CVE-2026-13247 WordPress Stored XS...

A critical authentication bypass vulnerability in Fortinet products (FortiOS, FortiProxy, and FortiSwitchManager) - gotr00t0day/CVE-2022-40684

CVE-2024-31317提权利用软件。此项目为二改项目，原项目由wqry085制作，本项目添加了一些新增功能，并美化了UI界面。（本人为新人coder，项目由AI完成，出现任何bug可向我反馈） - nianfan555/PoC-Deployer-System

Contribute to Bam0x7/linux-kernel-cve-exploit development by creating an account on GitHub.

Educational Flask web vulnerability scanner for authorized targets with PDF reporting. - Nabiha-Nabz/VScan

Threat intelligence reports and vulnerability advisories, written for both technical and executive audiences. - Be-zerk/threat-intel-reports

AI 赋能的漏洞播报系统，AI 根据公开的漏洞思路自动生成 PoC、漏洞简介、漏洞原理、攻击范围，自动落库存储nuclei格式，24 小时监控全网漏洞播报，间隔10分钟自动抓取。 - wr0x00/ai_bobao

Read-only Copy Fail (CVE-2026-31431) check, packaged as an agent skill - ledlight33/copyfail-check-skill

Contribute to Udayveer17/GoodGames-HTB-SSTI-RCE development by creating an account on GitHub.

End-to-end bug bounty toolkit: subdomain recon, Wayback & VirusTotal intel, URL collection, 403 bypass, JWT/Firebase testing, Burp extensions, bookmarklets, AI prompts, wordlists & ...

ubovm 是一款为比较特别的IDE，它为编程，渗透测试，代码审计，主机运维等多流程而生. Contribute to sairson/ubovm development by creating an account on GitHub.

A Working PoC For CVE-2026-40281. Contribute to rabakuku/CVE-2026-40281 development by creating an account on GitHub.

Controlled web application security assessment of DVWA using Kali Linux, documenting reconnaissance, enumeration, SQL injection, XSS, session testing, risk analysis, and remediation. - babatoki/DVW...

TrainFlow · 知华企业培训与能力考核：课程版本、指定员工学习、自动评分、独立实操复核、到期重训。Java 21 / Spring Boot / Vue 3 / MySQL，公开源码学习版，非商业授权。 - zhuatech-han/zhuatech-trainflow

FIT5003 A2 reflected XSS payload demo. Contribute to hvarsh-cyber/devbank-xss-poc development by creating an account on GitHub.

HTML ingestion: tolerant parser and DOM, entity decoding, text extraction, an allowlist sanitizer, CSS selectors, meta and table extraction (Rust/TS/Python/Go/PHP). Zero dependencies. - codinglombo...

Inspired by PEStudio and Didier Stevens' tools. Contribute to boredchilada/pdfstudio development by creating an account on GitHub.

Find C2 beaconing in Zeek conn.log files. Catches beacons that miss check-ins or repeat a retry cycle, explains every finding, and writes a one-file HTML report. Evaluated on IoT-23 malware capture...