WordPress plugin for site migration via meta refresh redirects. Redirects all frontend pages to a target domain with remote URL checking, title fetching, canonical tag output, and a customizable la...

Hands-on Vulnerability Assessment & Penetration Testing (VAPT) practice reports including SQL Injection, XSS, and web security testing. - Twinkal-hub/VAPT-Lab-Reports

It covers everything from initial network attacks like LLMNR poisoning and SMB relay, all the way through to post-compromise techniques including Kerberoasting, token impersonation, credential dump...

A curated collection of XSS payloads in multiple formats (SVG, HTML, XML, JS, images, cookies, CSP bypass, polyglots) for security research, bug bounty, and penetration testing. - abcd972323/All-In...

高级固件安全分析工作流，集成静态分析、动态仿真、漏洞验证和智能报告生成. Contribute to harry1080/firmware-analysis-workflow development by creating an account on GitHub.

A collection of advanced PHP and ASPX web shells designed to bypass security measures. - WildEpieiKeia/Php-Webshell-bypass

CVE-2026-34724. Contribute to 0xBlackash/CVE-2026-34724 development by creating an account on GitHub.

Performed a comprehensive web application penetration test identifying critical vulnerabilities including SQL injection, command injection, RCE, and XXE, aligned with OWASP Top 10. - sampurangill/w...

渗透测试攻击路径规划及分析平台 - Penetration Testing Attack Path Planning & Analysis Platform - Lcoin-code/attack-path-platform

Contribute to Schwarzii1/xss-angriffsmethode development by creating an account on GitHub.

OTPBYPASS Bot sends a post request to the api, which will save the call into a sqlite DB and send the call to the custom twilio API.Google,Snapchat,Instagram,Facebook,Whatsapp,Twitter,Amazon - B4BR...

An injector for injecting shellcode into PE image files. - RTS-Framework/PE-Injector

qq经典农场PC端自动化控制 wx端使用cdp注入 qq端使用js注入 非视觉方案 可最小化运行. Contribute to linguo2625469/qq-farm-cdp-auto development by creating an account on GitHub.

WEBSHELL BYPASS . Contribute to H4nSec01337/BondowosoBlackHat-WEBSHELL development by creating an account on GitHub.

Security-focused authentication and admin panel demo with RBAC, audit logging, CSRF protection, rate limiting, and account lockout. - cntzemir/secure-auth-admin-demo

"GhostPing" Python-based ICMP Command & Control (C2) channel intended for competition use only. - miller-js/GhostPing

Unauthenticated Arbitrary File Upload in EventPrime Plugin - d3kc4rt1/CVE-2026-1657

Load Cobalt Strike beacons stealthily using reflective loading, module overloading, and sleep masking to bypass endpoint detection and response systems. - Batisteblightywound507/KaplaStrike

Xboard / V2Board Unauth Account Takeover - Magic Link Token Leak (CVE-2026-39912) - Chocapikk/CVE-2026-39912

CVE-2026-34197 — Apache ActiveMQ RCE via Jolokia API | PoC Exploit - KONDORDEVSECURITYCORP/CVE-2026-34197

Trackly ist eine SSR-first Zeiterfassung (PHP 8.2 + MariaDB) für kleine Vereine: manuelle Zeiten & Timer, regelbasierte Flags (Arbeitsrecht), Audit-Logs, Rückfragen/Koordination, Ankündigun...