管理用户自建的各类软件工具（出发点是管理渗透测试类工具，但可以推广到各类软件工具和在线工具），并对其使用体验进行优化。本工具集主要对命令行程序进行了大量优化，对工具检索、环境配置、工具自定义、扫描结果管理、进程管理方面的用户体验也进行了大量探索。 - laferce/cybertoolsuite

This repository contains a proof-of-concept exploit for CVE-2025-48827, a critical authentication bypass vulnerability affecting vBulletin 5.0.0–5.7.5 and 6.0.0–6.0.3 when running on PHP 8.1 or lat...

用于渗透测试的WebFuzz扫描工具. Contribute to Nbccccc/FinderFuzz development by creating an account on GitHub.

NoAuth 是一款用于动态生成可能绕过 Java 鉴权的 payload 并进行 fuzz 测试的工具，主要用于在代码审计和绕鉴权场景中节省时间 - steveopen1/NoAuth_V2

CVE-2025-29927 PoC | Auth Bypass Exploit | Python Tool using httpx | Middleware Vulnerability | Ethical Hacking Toolkit - mickhacking/Thank-u-Next

CVE-2025-29927 PoC | Auth Bypass Exploit | Python Tool using httpx | Middleware Vulnerability | Ethical Hacking Toolkit - mickhacking/Thank-u-Next

Educational Docker lab to simulate privilege escalation via CVE-2025-32463 - dbarquero/cve-2025-32463-lab

CVE-2025-5777 (CitrixBleed 2) - [Citrix NetScaler ADC] [Citrix Gateway] - SleepNotF0und/CVE-2025-5777

CVE-2025-27591. Contribute to DarksBlackSk/CVE-2025-27591 development by creating an account on GitHub.

CVE-2025-27591 is a known privilege escalation vulnerability in the Below service (version < v0.9.0) - dollarboysushil/Linux-Privilege-Escalation-CVE-2025-27591

Stored XSS in Sirv WordPress Plugin v7.5.5 – CVE-2025-XXXX - Bineshmadharapu29/CVE-2025-XXXX-Sirv-Stored-XSS

CVE-2025-32463 漏洞概念验证. Contribute to 9Insomnie/CVE-2025-32463 development by creating an account on GitHub.

渗透测试报告自动化生成. Contribute to chxl1999/pentest_report_generator development by creating an account on GitHub.

Mazesec团队自制靶机题解仓库，专注于分享HackMyVM平台的自制靶机PDF题解，涵盖渗透测试实战与安全研究，供学习交流使用。 - hyhforevertop/Mazesec-writeups

PoC for CVE-2025-25257, a critical unauthenticated SQL injection in FortiWeb. Exploits SQLi via the Authorization header to write a webshell and gain RCE. No login required. Fully automated. - 0xgh...

CVE-2025-53833. Contribute to B1ack4sh/Blackash-CVE-2025-53833 development by creating an account on GitHub.

AutoVAPT is an open-source GUI tool for automated Vulnerability Assessment and Penetration Testing. It integrates OWASP ZAP, CVE/CVSS enrichment, AI-based analysis, and custom recon tools—built for...

### 🎓 **信息安全学生 | Web、工具极简主义者 | 运维萌新成长中** **📌 关于我** 网络安全专业在读，热爱 **漏洞挖掘 & 防御实战**，喜欢用**轻量级工具**折腾各种小项目，在Linux服务器里摸爬滚打，目标是成为一名**懂开发的安全工程师**。 ### **🛠️ 技术栈 & 兴趣** 🔐 **安全方向** ▸ ...

Working exploit for CVE-2025-23167 – HTTP request smuggling in vulnerable Node.js 20.x versions before 20.19.2 - abhisek3122/CVE-2025-23167

Secure, open-source RCE platform with Docker isolation, JWT auth, rate limiting, and multi-language support. - vikashkrdeveloper/SafeExec