Local WordPress pingback/Brotli RCE reproduction with a one-use Podman lab - fortbridge/cve-2026-111497-wordpress-pingback-brotli

CVE/漏洞聚合查询skill. Contribute to 6Kmfi6HP/cve-search development by creating an account on GitHub.

Reflected XSS demonstration, remediation and automated security testing using Flask - darkbytedon/reflected-xss-security-lab

Official Build & Verified Release | 基于 AI Agent + MCP 工具链 + 渗透 Skill 编排， 配合大语言模型， 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。 - kush-coder/autopilot-vulnclaw

Official Build & Verified Release | Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management - kush-coder/autopilot-nettacker

vulnerability scanner python based. Contribute to kirthihashinis-art/vulnerability-scanner development by creating an account on GitHub.

CVE-2026-112688 CoreMedia PoC: controlled saved-LR corruption in backboardd, stopped by PAC, plus evidence of a constrained write-1 primitive. - 0xjohnnydev/CVE-2026-112688-backboardd

Engineering sync brief: lessons from Log4Shell (CVE-2021-44228) and xz-utils backdoor (CVE-2024-3094) - mcpmark-eval-liuhezi/log4j-xz-lessons

ServerTools - one-command Linux optimizer for Xray/Marzban/Pasarguard/WireGuard: BBR + fq_codel, health score, smart MSS, proxy priority, rollback - Saj-1992/Xray-VPS-Optimizer

Clean-room config extractor and detection rules for OtterCookie (Contagious Interview / WaterPlum): recovers C2 from the Socket.IO/Engine.IO transport, with YARA and Sigma coverage. - n4uu/crumble

Contribute to Suryaaa2004/Yara-malware-triage-tool development by creating an account on GitHub.

Emergency Zero-Downtime Linux Kernel Defense & Attack-Surface Disarmer. Active hotpatching for CVE-2026-98432 (MPTCP RCE), CVE-2024-1086, CVE-2026-53266 & Seccomp sandboxing. - mc493/kshield

PoC for CVE-2024-4367. Contribute to minhi1/CVE-2024-4367 development by creating an account on GitHub.

**Autonomous AI-Traffic, C2 Beacon & Pre-Compromise Network Threat Hunter** - Yoonas18/OpenC2Hunter

AutorizePro - Burp Suite Authorization Testing Extension (Modified) - huahaiYa/AutorizePro

WordPress REST Batch route confusion + SQLi RCE chain reproduction (CVE-2026-63030 & CVE-2026-60137) - l-i-uqing/CVE-2026-63030-wp2shell-repro

使用带隐身模式的 Puppeteer 绕过验证码。对于更棘手的 WAF，可尝试额外插件或 Bright Data 的网络解锁器 API。 - bright-cn/Puppeteer-bypass-captcha

Flask-based web vulnerability scanner with ownership verification (OWASP Top 10) - hazelbenny/web-vuln-scanner

Automated async vulnerability scanner for bug bounty hunters — SQLi, XSS, SSRF, LFI, open redirect, CORS, subdomain takeover. Termux + Linux ready. - pbbsa47-tech/bug-find

PoC and verification material for CVE-2026-42945 (CWE-122 heap overflow in ngx_http_rewrite_module -> attacker-shaped cleanup hijack -> system() RCE in the ASLR-off worker; patched-tw...