Infrastructure recon and exploitation framework for authorized pentesting — port scanning, service fingerprinting, brute force, and a chained RCE extractor. - fcarvajalbrown/port-scanner

CVE-2026-63030 + CVE-2026-60137 exploit RCE chain. - gichirimaku/wp2shell-PoC

A cybersecurity project focused on identifying potential vulnerabilities in web applications and improving web application security. - yashu210274/Web-Vulnerability-Scanner

pfSense CE 2.9.0-DEVELOPMENT - Medium - Remote - XSS - crash_reporter textarea - abraxas/pfsense-crash-reporter-xss

pfSense CE 2.9.0-DEVELOPMENT - Medium - Remote - XSS - LDAP username in head.inc - abraxas/pfsense-auth-username-xss

Local defensive TCP, TLS and HTTP configuration workbench with FastAPI, React, explicit authorization scope and evidence-only reports. Learning project, not a confirmed-vulnerability scanner. - ar-...

Lockfile vulnerability scanner in Go: 7 formats, OSV.dev, CVSS scoring, alias merging, SARIF + GitHub Action. Matches osv-scanner 90/90 on a 600-package project. - Revind4k/lockscan

Static analysis of seven CRPx0 ransomware builds: recovery tool, implementation faults, YARA/KQL/Elastic detections, independent reproduction. No samples. - Weirdlogic/crpx0-static

Python-based C2 beacon detection using connection timing analysis, with improved CSV error handling and automated tests. - Yugsalecha812/c2-beacon-detector

Contribute to DoanTien09/shellcode_evasion_framework development by creating an account on GitHub.

RCE standard host libraries: pure-RCE crypto, ML-KEM/PQXDH, HPKE and MLS - openIE-dev/rce-stdlib

#. Contribute to nowak0x37/Java-Insecure-Deserialization---Burp-Suite-Extension development by creating an account on GitHub.

PayLedger is a web-based payment application that addresses two major security vulnerabilities: Stored Cross-Site Scripting (XSS) and Insecure Direct Object References (IDOR). It aims to prevent ma...

CVE-2026-64507 — PoC: IBPB flush on BPF JIT allocation - manalejandro/CVE-2026-64507

Self-hosted uptime monitor that shows why a check failed: phase timings, failure classes, incidents, SSRF-safe probing. FastAPI + Postgres + React. - TheInfiniteLoop22/SignalNest

SSRF-safe HTTP(S) fetch utilities backed by undici - vercel-labs/guarded-fetch

Writeup e report tecnici dei laboratori PortSwigger Web Security Academy — SQL injection, XSS, SSRF e altre vulnerabilità web. Esercizi a scopo formativo. - leonardoonori1-ops/PortSwigger-Academy

Create repository. Contribute to dakhilotmane045-ai/xss-lab development by creating an account on GitHub.

Public research and safe local PoC for LaraDashboard stored XSS via SVG upload (GHSA-9gxw-qpx8-x9c7) - capivara-research/GHSA-9gxw-qpx8-x9c7

A slightly more robust version of MaherAzzouzi's POC, created by my agent on the fly during testing. - hoodoer/VsockDrop-Adapted-CVE-2026-53365

JsOwl —— Go 编写的 Web 安全信息收集利器。集 JavaScript 信息收集、API 端点提取、敏感信息扫描、攻击面梳理 于一体，同时提供 CLI 工具与 Go 库。内置 direct / browser / auto 三种采集模式，兼容 HaE 规则，支持登录态扫描、运行时交互、AI 辅助分析与 MCP Server，输出 JSON 与交互式 HTML 报告，是渗透测试、红...