Writeups for SEED Labs web attack labs: SQL injection, CSRF and XSS against Elgg and a PHP/MySQL app, with payloads and screenshots. - Khushbu-H-Patel/seedlabs-web-attack-writeups

A passive Burp Suite extension that maps website functionality from captured traffic, recommends attack vectors with supporting evidence, and guides manual testing with checklists, Focus Mode, inve...

Flask app with vulnerable and fixed modes: SQLi, XSS, CSRF, SSRF, IDOR. 43 exploit tests. - braylo-ai/owasp-vuln-vs-fixed

Proof of concept for GHSA-xqc2-xf4c-x3h3 - unauthenticated RCE in React Server Components via typed-array transport desynchronisation (react-server-dom-* 19.2.8, fixed in 19.2.9) - rudSarkar/GHSA-x...

How publishing an OCI artifact turns a routine pull into SSRF, stored XSS, DoS, and more — companion research for DEF CON 34's "No Socket, No Privs, No Problem." - gouldni...

Contribute to s3c4ct0r/AdaptiHound-SE development by creating an account on GitHub.

NetChess 2.1 SEH buffer overflow (0-day) — original vulnerability research with a working PoC, published on Packet Storm. - Eminli/0Day_NetChess

Runtime-configurable mailer for Symfony on top of Instance Settings: DSN from the admin UI on every send, DSN and sender validation with an SSRF host guard, test e-mail, Resend key check, sent-mail...

Editorial headless CMS and block page builder: collections, revisions, Kanban, SSRF-safe webhooks, scheduled publishing, secure headless API. Next.js 16, tRPC v11, Prisma 7, Better Auth. - ssrjkk/v...

Application level vulnerability scanner. Contribute to RobinTheMan/Vulnerability-Scanner development by creating an account on GitHub.

Granite-powered vulnerability exploitation research and prediction for Sheridan Datathon 2026 - SarasGunjan/Tell

W tym repozytorium znajduje się prezentacja oraz zadania dla grupy na temat podatności XSS. - michalpatola/XSS-projekt

Sistema de controle de estoque de medicamentos para postos de saúde e ONGs, com Spring Boot e MongoDB. PoC alinhada ao ODS 3 (Saúde e Bem-Estar). - CaduCarfi/StockLine

⭐️ Burp Suite | Web Application Security Testing Toolkit | Penetration Testing Software | HTTP Proxy & Interceptor | Vulnerability Scanner | Manual & Automated Testing Tool | Setup ...

Web Vulnerability Scanner. Contribute to MuhamadBayuRidhani/hsu-scanner development by creating an account on GitHub.

Memory-only temp root toolkit for vivo Xplay6 (PD1610): temproot APK, native escalation sources, Magisk runtime module and system overlay scripts. | 面向 vivo Xplay6（PD1610）的内存态临时 root 工具链：提权 APK、原生提...

SecretSifter Burp MCP — full edition with multi-provider AI Triage and Claude Code MCP integration. Burp Suite extension for secret detection. - secretsifter/secretsifter-burp-mcp

Hydra-Sploit Tool is written in rust programming language for fast scanning enumeration & exploit. - HarithBUGbounty/Hydra-Sploit

Read-only audit tool for the actively-exploited Plex2Shell exploit chain (CVE-2026-96652/-96654/-96655/-96656, fixed in Plex Media Server 1.43.3.10861). Remote version check + local IoC scan. Stdli...

Agentless, read-only compromise checker for RHEL and Ubuntu servers - john-c-houser-tech/compromise-checker

基于最新 0day 漏洞和 3105进行修补的版本. Contribute to t479842598/3106 development by creating an account on GitHub.