Defensive PHP2Shell kit: read-only PHP inventory, fixed-version check, experimental Sigma/YARA/SIEM detections, lab-validated results and bundled community rules. - BRANDEFENSE/php2shell-defense-kit

Standalone defensive checker project for CVE-2026-104935: Ivanti Connect Secure: Authentication bypass by spoofing. One exploit per repository; implementation pending. - CompleTetech-Security/ivant...

PoC: CVE-2026-110152 Chrome ANGLE vertex-attribute translation heap buffer overflow (CVSS 9.6) - utkarsssh17/cve-2026-110152-chrome-ngle-rce-poc

A c++ shellcode loader and .net pe loader. it is using indirect syscalls with module stomping. it is still in development so stability isnt optimal. For the .net loader part its loading a random dl...

Deterministic HTTP traffic generator for cybersecurity labs. Simulate SQLi, XSS, RCE, LFI attacks. Generate PCAPs for WAF & IDS testing. - agugliotta/pcap-lab

Contribute to utkarsssh17/cve-2026-nextjs-use-cache-rce-poc development by creating an account on GitHub.

A Jenkins view that turns your jobs into a wall of big coloured tiles - jenkinsci/live-wall-plugin

Vulnerability Scanner - Port scanning, service detection, web vulnerability scanning (XSS, SQLi), and CVE matching engine - janderik/vuln-forge

A PHP app that ships an unpatched PHP runtime (PHP2Shell), for the Devzy scan to flag. No exploit code. - devzyai/CVE-2026-109618-POC

Contribute to iliasse-e/web-theorie development by creating an account on GitHub.

Interactive Web Security Attack & Defense Hub evaluating OWASP Top 10 vulnerabilities (XSS, SQLi, IDOR, LFI, RCE, CSRF, Weak Auth, Missing Headers). Features dual-mode target sandboxing, re...

Gitlab-CE POC using Docker, GitLab CI/CD, and an AWS EC2 self-hosted GitLab Runner - Ayush8873/gitlab-poc

Lightweight SQLi/XSS web vulnerability scanner in Python - uspokoysa1007/web-vuln-scanner

PHP Session upload progress injection - CVE-2026-115560 - sykeops/CVE-2026-115560

CVE-2026-112403: Pillow heap buffer overflow in ImagingJpegDecode via lossless JPEG thumbnail. One POST, 100% crash rate. - al4n4n/CVE-2026-112403

An automated network vulnerability scanner systematically probes network hosts, open ports, and software versions to detect security flaws and configuration errors - sharmaji9065025-sudo/automated-...

my version of an exploit for Krayin CRM v2.2.x - CVE-2026-38526 - sh3llc0d3-0x15/CVE-2026-38526-Exploit

Standalone detection probe for PHP2Shell (CVE-2026-109618 / CVE-2026-109619): passive version fingerprint by default, opt-in active crash probe via Nuclei. - ZiarenEASM/php2shell-probe

Hafif, açık kaynak Windows antivirüsü: Defender + YARA-X + ClamAV, şifreli karantina, olay günlüğü - payidaramelles-sys/sentinel-av

Lab-only exact-profile RCE/DoS validator for CVE-2026-111497; refuses non-loopback targets - mnk-works/cve-2026-111497-rce-checker

A website heartbeat monitor that keeps beating after you close the tab — Cloudflare Workers + Cron Triggers + D1, with SSRF-hardened probing, incident timelines and public status pages. - iiiiiiiii...