proof-of-concept implementation designed to demonstrate remote code execution primitives targeting the Microsoft Server Message Block (SMB) protocol stack. - yonathanpy/SMB_RCE

Early warning when attackers start exploiting software you run. - Legatia/hejnal

Web Vulnerability Scanner — safe GET-only checks for reflected XSS, error-based SQLi, headers, cookies, CORS and open redirects, with HTML/JSON reports. Authorized testing only. GPL-3.0. - tahiryou...

Contribute to Omar-Ahmed23777/UneeQ-XSS-Task development by creating an account on GitHub.

Open-source desktop malware triage, zero-copy PE forensic analyzer, and threat intelligence workbench for Windows - bakhishovism/Vyrulix

Single-file attack-surface recon pipeline in Python: chains subdomain discovery, live-host probing, port sweeping, passive URL harvesting and nuclei scanning into one reproducible run with structur...

A hands-on cybersecurity research and exploit validation lab demonstrating OS Command Injection (CWE-78) in DVWA. Includes a custom Python PoC, detection rules, and remediation steps. - JAK-07/CWE-...

Octoscan is a static vulnerability scanner for GitHub action workflows. - synacktiv/octoscan

一个简单的用于 Java 反序列化漏洞识别的扫描agent 兼扫描工具。. Contribute to Qmoyue/JustSimple development by creating an account on GitHub.

Burp Suite extension that security-tests MCP (Model Context Protocol) servers - peter-hendy/mcp-server-scanner-extension

DVWA 靶场 Medium 难度 Web 渗透测试复盘：六类漏洞 + 三档过滤对比. Contribute to liguodong1220/dvwa-pentest development by creating an account on GitHub.

MCP server for Burp Suite Pro: scanner orchestration, HTTP/2, WebSocket history, saved requests, editor access, 49 tools. - h1-mrz/burp-agent-bridge

Python-based XSS payload injection & CSRF token analysis scripts + documented PoC for Week 4 of the Automated Web Application Security Assessment internship project. - Robert-ux-dev/Financi...

Contribute to zanarelkov/CVE-2026-123158_SSHole_PoC development by creating an account on GitHub.

Incremental Nuclei scanning module for Artemis. Contribute to allanjelly/cybercover_incremental development by creating an account on GitHub.

Control Web Panel < 1.29 — 10-CVE chain: unauth module dispatch -> hosting RCE -> loopback API -> root. Analysis, PoC, hostile lab, E2E validation. - im0xfay/CWP2SHELL

telegram RCE. Contribute to bikini/telejam development by creating an account on GitHub.

智能体做渗透测试时用 curl 探测，想把请求搬进 Burp / Yakit 复现改包时用：curl 命令与原始 HTTP 报文双向互转，离线、零依赖、单文件。 - Ordinaryzyx/curl-to-burp

Research notes for cve-2026-2441-poc. Contribute to dexteon/cve-2026-2441-poc development by creating an account on GitHub.

Research notes for cve-2026-125350-poc. Contribute to dexteon/cve-2026-125350-poc development by creating an account on GitHub.

CVE-2026-126537 — Ninja Forms File Uploads <= 3.3.36: unauthenticated arbitrary file deletion/read via files[].data.file_path + extra.saveProgress. PoC, analysis, docker lab. - im0xfay/CVE-2...