Authorized security-research PoC repo for a Make.combug bounty test. Not a real plugin. - sujanthapamagar101-byte/make-marketplace-xss-poc-1109

Testing for Cross-site Scripting attacks. Contribute to konrness/xss-poc development by creating an account on GitHub.

PoC Connect to a remote Docker Host from CLI. Contribute to masalinas/poc-docker-remote development by creating an account on GitHub.

TRADEGRID is a real-time virtual stock exchange and trading simulator featuring dynamic market movements, automated order matching, virtual stock trading, portfolio management, live market analytic...

OriginStrike is a high-performance, concurrent CORS vulnerability scanner and exploitation suite built for security researchers and bug hunters. It features a robust multi-origin payload fuzzing en...

Desktop MITM, web testing & network analysis suite: transparent proxy with QUIC blocking, live SNI/host monitoring without CA, vulnerability scanner, fuzzer, Collaborator OOB, HAR export, a...

Static analysis of an XWorm RAT delivered via a 12-layer encrypted PowerShell loader (RunPE + C2 recovery) - voidrelic-security/xworm-analysis-2026

Burp Suite extension: passive check for missing or weak HTTP security headers on in-scope responses (Montoya API). - Excession-Labs/burp-security-headers

Burp Buddy is a Burp Suite extension that integrates Large Language Models (LLMs) to assist security researchers with vulnerability analysis, attack vector generation, and HTTP traffic understandin...

Plateforme de formation DevSecOps à la demande : Terraform (Scaleway), GitLab auto-hébergé, Kapsule + Argo CD, pipeline de sécurité Java (GitLab CI, Jenkins, Bitbucket) - aboigues/devsecops-lab

Tested Sigma and YARA examples with synthetic cloud events and a local harness. - harshacreate/detection-rules

Contribute to netstar-labs/yarrow development by creating an account on GitHub.

PurpleHawkS helps Elevating Defense through Sharp-Eyed Attack Intelligence - chandraktrivedi/PurpleHawkS

Contribute to Joelndege/Cross-Site-Scripting-XSS-Testing development by creating an account on GitHub.

Writeups for SEED Labs web attack labs: SQL injection, CSRF and XSS against Elgg and a PHP/MySQL app, with payloads and screenshots. - Khushbu-H-Patel/seedlabs-web-attack-writeups

A passive Burp Suite extension that maps website functionality from captured traffic, recommends attack vectors with supporting evidence, and guides manual testing with checklists, Focus Mode, inve...

Flask app with vulnerable and fixed modes: SQLi, XSS, CSRF, SSRF, IDOR. 43 exploit tests. - braylo-ai/owasp-vuln-vs-fixed

Proof of concept for GHSA-xqc2-xf4c-x3h3 - unauthenticated RCE in React Server Components via typed-array transport desynchronisation (react-server-dom-* 19.2.8, fixed in 19.2.9) - rudSarkar/GHSA-x...

How publishing an OCI artifact turns a routine pull into SSRF, stored XSS, DoS, and more — companion research for DEF CON 34's "No Socket, No Privs, No Problem." - gouldni...

Contribute to s3c4ct0r/AdaptiHound-SE development by creating an account on GitHub.

NetChess 2.1 SEH buffer overflow (0-day) — original vulnerability research with a working PoC, published on Packet Storm. - Eminli/0Day_NetChess