Offensive Line: An agentic harness used for penetration testing or exploit development. - nihaal-prasad/oline

Async Web Pentesting Tool (WAF Bypass, XSS, SQLi). Contribute to smsl1/ZebraStrike development by creating an account on GitHub.

A next-generation Burp Suite extension for bridging OpenAPI specifications and sending parsed endpoints to the Scanner, Repeater, and Intruder tools. Now with RBAC comparison grid! - HoldMyBeer-gg/...

CVE-2026-9843-POC - Exploit. Contribute to sam00/CVE-2026-98432-POC-Exploit development by creating an account on GitHub.

this is a harmless pen test for the linux kernel exploit CVE-2026-98432 - moatome/CVE-2026-98432-pen-test-main

CXploit v2.0 - A Metasploit-class exploit development and penetration testing framework in Python. 105 modules, auto-exploitation, encrypted C2, WAF bypass, and a real-time dashboard. - ravichandr...

Contribute to sam00/Node2Shell-CVE-2026-111497-POC development by creating an account on GitHub.

Web security learning notes and lab reports covering SQL injection, XSS, and access control using PortSwigger Web Security Academy. - AndriiVDO/web-security-labs

PoC for jsserver vulnerability in webOS 3.5+(?). Contribute to throwaway96/slopbro development by creating an account on GitHub.

RAVEN is Adversary emulation framework. Build for red team simulation operations and research. - MatrixTM26/RAVEN-C2

Contribute to sam00/CVE-2026-111943-Emudhra-Ca-Compromise-POC development by creating an account on GitHub.

Android security audit and device-management platform: zero-click carrier delivery over 17 channels, 66 vendored CVE payloads, an ADB post-exploitation chain, and a Flask + React mission-control co...

Self-hosted PortSwigger-style exploit server: craft responses, serve them at custom paths, and watch the access log. - Aceproulx/exploit-server

Contribute to sam00/CVE-2026-109618-CVE-2026-109619-POC development by creating an account on GitHub.

Burp Suite extension for local reflection analysis and XSS triage, with configurable probes, request/response evidence, and a dark workspace. - 0xsheet/SilentStrike-XSS

A proof of concept I made that demonstrates how the Diffie–Hellman key exchange works under the hood, built from scratch in Node.js. - radman-radco/diffie-hellman-poc

Pure-Python fastjson @JSONType jar generator for authorized lab reproduction of the fastjson 1.2.80/1.2.83 autotype-bypass RCE | 授权靶场复现与安全研究用 - xcz323/fastjson-rce-jargen

Contribute to starriv/CVE-2026-98260-Xiaomi-17-Pro-Max development by creating an account on GitHub.

Network camera vulnerability scanner based on Ingram, with credential/snapshot POCs for 2022-2026 CVEs. - yb90928/Ingram-Extended

AI-Assisted Code Vulnerability Scanner. Contribute to aloysus123/Applied-AI-for-Cybersecurity-project development by creating an account on GitHub.

Research and an inert verifier for Krayin CRM’s email-attachment public-storage vulnerability - giki-shergill/Krayin-email-attachment-rce