Local privilege escalation PoC for CVE-2026-87772 (Pardus About): passwordless Polkit action + root mount without nosuid. Reproduced on 1.2.4; fixed in 1.2.5. - jankesec/CVE-2026-87772-pardus-about...

A Python-based mini vulnerability scanner that detects open ports and common web security issues. - Henna611/Mini-Vulnerability-Scanner

Free bilingual (EN/ID) malware analysis learning base - safe sample handling, static and dynamic analysis, YARA, sandboxes, IOC reporting. Defensive and educational only. MIT licensed. - siedysoes/...

Critical SSTI on NASA URS earthdata server. Contribute to Vulndisclosure/Cosmicstrike-vuln development by creating an account on GitHub.

Burp Suite extension that bypasses Cloudflare TLS fingerprinting (JA3/JA4 + HTTP/2) with a real browser fingerprint. Zero-config, cross-platform. - Re13orn/BypassCloudflare

Static security audit for MCP (Model Context Protocol) client configs and server code: leaked tokens, unpinned npx/uvx servers, shell injection, path traversal, SSRF. - abhi12337/mcp-audit

Intentionally vulnerable Flask app to practice path traversal (CWE-22) — a hands-on AppSec lab with Docker, CI/CD, Trivy and GHCR. - iv0ks/fetchly

proof-of-concept implementation designed to demonstrate remote code execution primitives targeting the Microsoft Server Message Block (SMB) protocol stack. - yonathanpy/SMB_RCE

Early warning when attackers start exploiting software you run. - Legatia/hejnal

Web Vulnerability Scanner — safe GET-only checks for reflected XSS, error-based SQLi, headers, cookies, CORS and open redirects, with HTML/JSON reports. Authorized testing only. GPL-3.0. - tahiryou...

Contribute to Omar-Ahmed23777/UneeQ-XSS-Task development by creating an account on GitHub.

Open-source desktop malware triage, zero-copy PE forensic analyzer, and threat intelligence workbench for Windows - bakhishovism/Vyrulix

Single-file attack-surface recon pipeline in Python: chains subdomain discovery, live-host probing, port sweeping, passive URL harvesting and nuclei scanning into one reproducible run with structur...

A hands-on cybersecurity research and exploit validation lab demonstrating OS Command Injection (CWE-78) in DVWA. Includes a custom Python PoC, detection rules, and remediation steps. - JAK-07/CWE-...

Octoscan is a static vulnerability scanner for GitHub action workflows. - synacktiv/octoscan

一个简单的用于 Java 反序列化漏洞识别的扫描agent 兼扫描工具。. Contribute to Qmoyue/JustSimple development by creating an account on GitHub.

Burp Suite extension that security-tests MCP (Model Context Protocol) servers - peter-hendy/mcp-server-scanner-extension

DVWA 靶场 Medium 难度 Web 渗透测试复盘：六类漏洞 + 三档过滤对比. Contribute to liguodong1220/dvwa-pentest development by creating an account on GitHub.

MCP server for Burp Suite Pro: scanner orchestration, HTTP/2, WebSocket history, saved requests, editor access, 49 tools. - h1-mrz/burp-agent-bridge

Python-based XSS payload injection & CSRF token analysis scripts + documented PoC for Week 4 of the Automated Web Application Security Assessment internship project. - Robert-ux-dev/Financi...

Contribute to zanarelkov/CVE-2026-123158_SSHole_PoC development by creating an account on GitHub.