SSRF 真实业务靶场. Contribute to lang-sec/SSRF-labs development by creating an account on GitHub.

A tool to scan websites for vulnerabiities and generate reports - SHOT786/Web-Vulnerability-Scanner-Reporter

Signed Microsoft Paint A/B research lab; CVE trigger not yet confirmed - blkph0x/CVE-2026-83844_POC

iQOO Neo8 (PD2301/V2301A) DirtyFrag 临时 root 完整记录 — CVE-2026-43284 页缓存写 + vivo_coredump shim 劫持 umh - nemoiwkryang/pd2301-dirtyfrag-root

Hands-on Cross-Site Scripting (XSS) research and PortSwigger Web Security Academy lab writeups, covering reflected, stored, and DOM-based XSS, exploitation techniques, payload analysis, and mitigat...

PoC: aave-dao comment.yml workflow_run artifact filename injection (RCE) - PDFtoMark/gab-poc-aave-wfr-inject

One word — NULL200OK — turns any AI agent (Claude Code, Cursor, Codex) into a disciplined bug-bounty hunter. A single SKILL.md condensing 6 offensive-security repos: recon, 12+ vuln playbooks, expl...

Python script that summarizes Wazuh SSH brute-force alerts by attacker IP, with first and last seen times. - Kamal0022/wazuh-alert-summarizer

CVE-2026-39732: Unauthenticated SQL Injection in Transliterator WordPress Plugin. PoC by Mor Golan. - Mor-Golan/CVE-2026-39732

CVE-2026-122675: Cross Site Request Forgery (CSRF) in Wp Social WordPress Plugin. PoC by Mor Golan. - Mor-Golan/CVE-2026-122675

DevaPath - x64 Windows PIC shellcode framework that resolves DLL modules and functions without PEB→Ldr walking. Uses Thread Entry Point stack scanning + MZ backward walk for module discovery, with ...

Behaviour-driven security sensor for macOS: Endpoint Security telemetry, Fibratus-style rules mapped to MITRE ATT&CK, YARA, capture and replay - rifqifitriady/ZAAFVesper

Detecção e Resposta a Ataques de Força Bruta | Perspectiva Blue Team / SOC - wav-cyber/brute-force-detection-blueteam

CVE-2026-115596: Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog WordPress Plugin. PoC by Mor Golan. - Mor-Golan/CVE-2026-115596

CVE-2026-112869: Unauthenticated Cross Site Scripting (XSS) in We're Open! WordPress Plugin. PoC by Mor Golan. - Mor-Golan/CVE-2026-112869

钓鱼网页与钓鱼邮件演练平台. Contribute to qiaoyukeji/AwareLab development by creating an account on GitHub.

Contribute to nanhang-950/CVE-2026-80914-POC development by creating an account on GitHub.

中文应急响应日志排查工作台 · DuckDB 引擎 · 证据清单驱动 · AI 可直接操盘. Contribute to llr-xxhh/logwarden development by creating an account on GitHub.

Layered pre-execution file inspection for Windows: VirusTotal, YARA, entropy and warning-sign scoring, with automatic AppLocker deny rules. - shiza2-p/pre-execution-detector

Automated Web Application Vulnerability Scanner. Contribute to AmmarNoorZia/WebGuard development by creating an account on GitHub.

One URL’s readable text as a CLI and local MCP server — main content as markdown, plain text or the raw body. Built for agent runtimes that can search but cannot read a user-given URL: no cookies, ...