this is a harmless pen test for the linux kernel exploit CVE-2026-98432 - moatome/CVE-2026-98432-pen-test-main

CXploit v2.0 - A Metasploit-class exploit development and penetration testing framework in Python. 105 modules, auto-exploitation, encrypted C2, WAF bypass, and a real-time dashboard. - ravichandr...

Contribute to sam00/Node2Shell-CVE-2026-111497-POC development by creating an account on GitHub.

Web security learning notes and lab reports covering SQL injection, XSS, and access control using PortSwigger Web Security Academy. - AndriiVDO/web-security-labs

PoC for jsserver vulnerability in webOS 3.5+(?). Contribute to throwaway96/slopbro development by creating an account on GitHub.

RAVEN is Adversary emulation framework. Build for red team simulation operations and research. - MatrixTM26/RAVEN-C2

Contribute to sam00/CVE-2026-111943-Emudhra-Ca-Compromise-POC development by creating an account on GitHub.

Android security audit and device-management platform: zero-click carrier delivery over 17 channels, 66 vendored CVE payloads, an ADB post-exploitation chain, and a Flask + React mission-control co...

Self-hosted PortSwigger-style exploit server: craft responses, serve them at custom paths, and watch the access log. - Aceproulx/exploit-server

Contribute to sam00/CVE-2026-109618-CVE-2026-109619-POC development by creating an account on GitHub.

Burp Suite extension for local reflection analysis and XSS triage, with configurable probes, request/response evidence, and a dark workspace. - 0xsheet/SilentStrike-XSS

A proof of concept I made that demonstrates how the Diffie–Hellman key exchange works under the hood, built from scratch in Node.js. - radman-radco/diffie-hellman-poc

Pure-Python fastjson @JSONType jar generator for authorized lab reproduction of the fastjson 1.2.80/1.2.83 autotype-bypass RCE | 授权靶场复现与安全研究用 - xcz323/fastjson-rce-jargen

Contribute to starriv/CVE-2026-98260-Xiaomi-17-Pro-Max development by creating an account on GitHub.

Network camera vulnerability scanner based on Ingram, with credential/snapshot POCs for 2022-2026 CVEs. - yb90928/Ingram-Extended

AI-Assisted Code Vulnerability Scanner. Contribute to aloysus123/Applied-AI-for-Cybersecurity-project development by creating an account on GitHub.

Research and an inert verifier for Krayin CRM’s email-attachment public-storage vulnerability - giki-shergill/Krayin-email-attachment-rce

售后客服 Agent：检索 + 工具调用接进业务系统；身份不进模型，越权三层拦截. Contribute to hugeAAA-asd/desk-agent development by creating an account on GitHub.

Shizuku-driven CVE-2026-98260 root + KernelSU runtime LKM loader for Xiaomi yingtian / lhasa (kernel 6.18.21) - zsw125/o3root

PoC for CVE-2026-115290 (Elasticsearch unauthenticated DoS via the remote cluster server port, CWE-674, ESA-2026-201): validated node kill in a containerized A/B lab (8.19.23 vs 8.19.24) - googlesk...