Universal Security Hub & 1-Line Hotpatching Engine for End-Of-Life PHP (5.4–8.1). Backported CVE patches (php2shell, CGI injection, filter chains), zero-downtime runtime armor, and automate...

Python-based dependency vulnerability scanner using the OSV API - Tahakhalid74/python-sbom-agent

A portable, fully integrated, and production-ready Linux deployment package for Burp Suite Professional with dynamic JVM pathing and native desktop/dock integration. - belsopky/Burp-Suite-Professio...

钓鱼邮件识别训练. Contribute to Jiafu318/wkj-phishing development by creating an account on GitHub.

Realistic multi-version lab + toolkit for the PHP php2shell pre-auth RCE (CVE-2026-109618/109619): detect, blindly prove, and understand it. No shared mounts, no planted files, no LFI. - RedSideSec...

pHp2Shell CVE 2016 109618 - 109619. Contribute to fahise/cve-2026-109618-cve-2026-109619-poc development by creating an account on GitHub.

Detection-only exposure scanner for PHP2Shell (CVE-2026-109618/109619): finds PHP across repositories, hosts, a network perimeter, and AWS, and grades each install by version and config without tri...

本项目为一个收集安全漏洞并提供AI学习网络安全知识的系统，有非常多的公开已知的漏洞可供学习，均为网上已公开的漏洞。并提供一个可自建、可复现的 AI 攻防靶场：内置一套企业级采购审批系统作为靶标，红队自动渗透、蓝队自动修复，全程可观测、可复盘、可跟练。规则上线前必须通过「召回 100% + 误杀 0%」的确定性闸门。项目附带AI开发与自动进行测试防御与攻击，旨在进入AI开发时代可以让开发者更好...

Burp Suite extension: auto-decompress Content-Encoding: zstd responses + editable Zstd tab (auto re-compress on send). JSON pretty-print. No conflict with HAE. - Yv-suian/burp-zstd

Composer package: run the phpwarden PHP vulnerability scanner from vendor/bin - oroma-alfred/phpwarden-composer

Reproducer for CVE-2026-95663 — Apache Camel camel-keycloak served a cached token introspection result past the token's expiry (CWE-613). Camel Spring Boot + Camel Quarkus. - oscerd/CVE-2026-95663

poc of CVE-2026-111497 delivered as a WOFF2 file. Contribute to timosar/woff2shell development by creating an account on GitHub.

MCP wrappers for offensive-security CLIs: nmap, nuclei, gobuster, ffuf, httpx, semgrep, trivy - PyHackSecGP/tooling-mcp

Contribute to CyRouteWolf/cve-2026-110447-poc development by creating an account on GitHub.

Lightweight Network Vulnerability Scanner & Security Posture Auditor | Aligned with Certiport IT Specialist Objectives - zubairkram/vigilscan

Skriftlig sikkerhedsundersøgelse af OWASP Juice Shop: DOM XSS, SQL injection og adgangskontrol. - khr-spec/juice-shop-aflevering

CVE-2026-109618 & CVE-2026-109619 — Pre-Auth RCE in PHP Core (session.upload_progress). Scanner, exploit verifier, and full technical analysis. - Dungsocool/PHP2Shell

Offline Python detector for CVE-2026-50053 version exposure in Zimbra Collaboration Suite. - emirwtz/CVE-2026-50053

最新兔兔助手带技能包。可用领域：破解（许可证、激活、卡密、注册机、反调试、壳/保护、密码学、VM） 逆向（二进制、APK、iOS/macOS、内核、漏洞利用、协议、取证） 游戏（客户端、内存、指针链、Hook、注入、驱动、反作弊、引擎、协议） 渗透（Web/API、认证授权、越权/IDOR、注入、文件上传、业务逻辑、AD/内网、提权、云/K8s/容器、隧道、AI/区块链） - kuku-mo...

The "pwnpost" Flask application has a Reflected XSS vulnerability in the /ephemeral endpoint. Because the application lacks CSRF protection, an attacker can force an authenticated...