Contribute to avego/php2shell development by creating an account on GitHub.

Pre-auth RCE exploit for OpenIdentityPlatform OpenAM <=16.0.5 via Java deserialization of the jato.clientSession parameter (CVE-2026-33439, CVSS 9.8). Comparator-based gadget chain with in-b...

Contribute to sec-aceh/sec-aceh-xss-payloads development by creating an account on GitHub.

Brauser - Sandbox Lab Browser: browser + security lab + sandbox. One-click site audit (TLS, headers, cookies, XSS, SQLi, ports, admin panels, exposed files), trust score 0-100, RU/EN interface. - E...

MCP server to give Claude a headless browser. It includes OAuth 2.1 for security and checks for prompt injection attempts. Every render request goes through a DNS pinned egress proxy, and the proje...

Verified test corpus and harness for SSRF allow/deny filters — built around what the WHATWG URL parser normalises before your filter runs, and the IPv6 transition forms it doesn't. - Young-...

Offline Ivanti Connect Secure evidence checker for CVE-2026-104935. Connect Secure build and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads. - CompleteTech-Se...

First offensive security framework for Model Context Protocol (MCP) — AI agent protocol vulnerability scanner, auditor, and exploitation toolkit - p17433308-cmyk/MCPwn

PHP2Shell CVE-2026-109618 / CVE-2026-109619 Mitigation work (Ansible Role) - axisops/CVE-2026-109618-109619

Modular ransomware simulation & C2 framework for authorized red-team labs — ChaCha20-Poly1305, X25519 ECDH + PSK mutual auth, wxWidgets ransom screen - zer0crypt02/Wasp-Hive

Research and full exploit chain for a qemu nvme guest to host 0day I discovered - 0xIcarus/qemu-nvme-escape

Burp Suite Extension that repeats HTTP requests until something fails - eric-m-holub/request-incubator

PoC: download-artifact zip traversal -> privileged workflow_run RCE (cloudflare/kumo docs-preview-post-build) - PDFtoMark/gab-poc-artifact-traversal

Contribute to aymencdm/CVE-2026-115926-free5gc-bsf-missing-auth development by creating an account on GitHub.

Contribute to aymencdm/CVE-2026-115925-free5gc-root-ca-key-exposure development by creating an account on GitHub.

Contribute to sec-aceh/Lab-DVWA-Stored-XSS development by creating an account on GitHub.

Contribute to sec-aceh/Stored-Cross-Site-Scripting-XSS- development by creating an account on GitHub.

“Lightweight, simple, and fast”—these are our core motivations in developing Blackout C2 Lite. Blackout C2 Lite is a next-generation C2 framework that you can use in red teaming and CTF activities....

Patent implementation: adaptive malware operational-state determination with dynamic telemetry reconfiguration. Live analysis console, static analysis (PE/PDF/Office/scripts), YARA-X, behaviour rul...

Ansible CVE-2026-109618, CVE-2026-109619 scanner. Contribute to cttynul/php2shell development by creating an account on GitHub.

Contribute to Allen-ux-dev/cve-2026-112621-test development by creating an account on GitHub.