CVE-2025-55182 "Ghost Action" — pre-auth RCE (React Flight deserialization, Next.js 15.5.6) CTF challenge. Problem only; solve/writeup excluded. - OhSoomin812/cve-2025-55182-ctf

PHP Object Injection -> Arbitrary File Deletion in FacturaScripts <= 2026.66 (CWE-502). PoC + advisory. - wvllxe/CVE-2026-104905-facturascripts-object-injection

Comprehensive ethical cybersecurity tools: network monitoring, SIEM, file integrity checker, vulnerability scanner, honeypot, malware sandbox, password manager - ajinashna44/cybersecurity-toolkit

Vulnerability Scanner in Python. Contribute to 3rch0m41/SpectraScan development by creating an account on GitHub.

Deliberately vulnerable Flask app: 8 OWASP flaws exploited, fixed, and covered by pytest regression tests - lutendothomo/flask-vuln-lab

Contribute to RHEcosystemAppEng/exploit-iq-client development by creating an account on GitHub.

System Service —— Android 恶意样本研究源码（详细版）本仓库包含一个高风险 Android 监控类恶意软件样本的源码（包名：com.servers.ozzbzk），主要用于静态分析、逆向工程、威胁检测规则开发、安全研究与防御教学。本次更新内容：完整保留原有中英文 README 全部内容与结构在原有第 13 节「防御侧建议」后，新增 第 13.5 节「详细清除与解决方法...

AI-powered web pentesting through a real browser. Built for VS Code + Burp Suite. - sal-scar/ghostcrawler-mcp

RabTech Academy Task 04 - OWASP Juice Shop vulnerability assessment covering SQL Injection, XSS, and BOLA/IDOR with PoC evidence and mitigation code. - nagasrivarun/RabTech-Task04-OWASP-Vulnerabili...

Contribute to beyavuz/cve-2026-105080-poc development by creating an account on GitHub.

🐸 Scans your Git repository with JFrog Xray & JFrog advanced security for security vulnerabilities. 🤖 - jfrog/frogbot

御天：Windows 安全防护套件（实时防护 / 原生引擎 / 云查杀 / YARA / 自保护）. Contribute to zhao1136-art/antivirus-software development by creating an account on GitHub.

Burp Suite extension for viewing, editing, and re-encoding Streamlit Protobuf WebSocket messages. - moorada/streamlit-protobuf-editor

SOC Analyst Level 1 Portfolio | Python for Blue Team | Log Analysis, Brute Force Detection | Learning in Public - Day 16 to Day 30 - aishasadiqa620-eng/BlueTeam-Portfolio

We do not sell scripts, bypass tools, or source code. We deliver custom, high-frequency SQLite data feeds for complex e-commerce targets under enterprise SLA. - KeywordBarrage/enterprise-waf-data-e...

Stored XSS in Cloud Server URL Parameter of Ruijie RG-ES Series Switches - byseeker/Ruijie-RG-ES-Series-Switches_XSS

基于 AI Agent + MCP 工具链 + 渗透 Skill 编排，配合大语言模型，自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。 - hansaes/VulnClaw

yara pre-compiled rules. Contribute to SrijanNandi/yarac development by creating an account on GitHub.

One-day analysis + sanitizer PoC of CVE-2026-43805 (IOKit IODMACommand DriverKit RPC race, CWE-362) - WTCYJ/CVE-2026-43805-analysis

PoC for CVE-2026-67401 — cPanel/WHM EmailTrack SQL injection leading to arbitrary file write and root RCE. Includes a self-contained vulnerable lab, SQLi detection, and full exploit chain. - hitech...

Agentic AI security scanner that hunts exploitable vulnerabilities like an adversary, proves them with executable PoCs, and fixes them test-first. A maintained fork of Capital One's VulnHun...