OPPO A96 (PFUM10) post-relock toolkit: CVE-2026-43499 chain -> real BakaSU driver, ocsk kernel defense probes vs OPPO OPLUS_ROOT_CHECK, boot restore scripts - poisongod/BakaSU-PostLock

Weaponized CVE-2026-112396 (Pillow heap use-after-free): deterministic heap grooming, file-triggered chain, attacker-chosen post-free writes - verified PoCs, evidence, CI. Plus pypdf CVE-2026-11379...

Reverse-engineering writeup, YARA rules and IOCs for the Akuma Stealer MaaS infostealer (detection/intel only) - NotAlexei/akuma-stealer-analysis

Race trigger, heap-reuse oracle, pcap analysis, detection and mitigation tooling for CVE-2026-98432 (Linux IPv4/TCP ireq_opt use-after-free). - H1z3-br0/CVE-2026-98432

CVE-2026-98432 (Linux IPv4 TCP use-after-free): how to check your server, apply a stopgap, and clean up after the fix - mahdi-salmanzade/CVE-2026-98432

BoberProxy is a Burp Suite extension written in Jython - KZ5017/BoberProxy

crawler que identifica parâmetros que aceitam URLs, testa SSRF interno e tenta alcançar `169.254.169.254` (AWS/GCP/Azure). - carjkls/Scanner-de-SSRF-com-detec-o-de-cloud-metadata

A modern infrastructure control panel for managing Xray-powered VPN services. XMesh Nexus aims to provide a unified interface for VPN infrastructure management, with a focus on a clean enterprise-...

A network vulnerability scanner for identifying exposed services, missing patches, and misconfigurations. - Pobrien52/network-vulnerability-scanner

CTF source-code vulnerability scanner for Python, JS/Node, PHP, Go, Java, Ruby, Lua, and Rust — finds real exploitable bugs (SQLi, RCE, SSRF, IDOR, auth bypass, unsafe deserialization) with suggest...

Reflected XSS scanner that parses the real HTML/JS context a parameter reflects into and generates a payload for that exact syntax — then confirms real execution in a headless browser instead of gu...

Contribute to utatan3/DOM-Based-XSS-via-Clipboard-HTML-Paste-44429- development by creating an account on GitHub.

Burp Suite extension for deep JavaScript analysis: auto-discovers unrequested Webpack chunks, reconstructs full API parameters & defaults, and catches live SQL errors. - 0xLatentThreat/burp...

A Burp Suite extension for penetration testers that combines an HTTP webhook listener (OAST), an interactive reverse shell terminal, and a multi-platform payload generator — all within a single int...

PabloCybersec: o SSTI Scanner, feita em Python do zero pra automatizar a etapa de detecção de Server-Side Template Injection. - Deepaudit/PabloCybersec-SSTI-Scanner

Automated Web Vulnerability Scanner - BharatCares | IBM SkillsBuild Cybersecurity Bootcamp 2026 - Nikamganesh09/vulnscope-web-vulnerability-scanner

PoC for HTB Fireflow (Medium): Langflow 1.8 pre-auth RCE with SSE exfiltration, MCP JWT alg=none tool registration, kubelet exec via nodes/proxy - d0lf1/htb-fireflow-poc

Contribute to Supradeep1009/Web-Application-Vulnerability-Scanner development by creating an account on GitHub.

A Burp Suite extension designed to streamline the targeting and manipulation of multi-step logic flaws. - smavromatis/pinpoint

myC2 beacon is a nontrivial C2 beacon malware application that periodically sends signals to a command and control server. - nickczak/myC2-beacon

A Python-based web vulnerability scanner for authorized local security testing. - madhumithaa1938/Hexashield