🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data. - sakthivel10q/CVE-2025-14847

🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently. - pedrocruz2202/mongobleed-scanner

☁ OneDrive public directory listing, based on onedrive-vercel-index, the secondary development Onedrive project fixes security vulnerabilities and improves performance, and provides Docker environm...

🛠️ Exploit Shiro deserialization vulnerabilities with this comprehensive tool, ensuring dynamic gadget generation and stealthy memory execution. - Shedo11/ShiroExploit

Burp Suite extension for automated detection of Log4j RCE, Apache Shiro, Fastjson RCE, and Next.js RCE vulnerabilities with passive and active scanning support. Features include context menu integr...

Contribute to Lutfifakee-Project/CVE-2026-41651 development by creating an account on GitHub.

🛠️ Exploit CVE-2025-2304 in Camaleon CMS easily with this Python script for privilege escalation, tested on version 2.9.0. - MAEN1-prog/CVE-2025-2304

🛡️ Analyze CVE-2025-5419 to exploit an uninitialized read vulnerability in V8 for arbitrary read/write access within the sandbox environment. - Riquelme54322/CVE-2025-5419

Full Kubernetes container escape demo on AWS EKS — Spring4Shell RCE to cluster takeover — with web dashboard, automated containment via Cortex XDR playbook + AWS Lambda, and security posture radar....

CRAReady SBOM test fixture — Java/Maven app with Log4Shell (CVE-2021-44228), Spring4Shell, Text4Shell, and other critical CVEs - neilc1964techned/craready-test-java-vulns

Docker-based CVE lab environments with PoC exploits. Log4Shell, Spring4Shell, Dirty Pipe, PwnKit, XZ backdoor and more. - Mkway/Critical-CVEs

A comprehensive Security Operations Centre (SOC) incident response simulation demonstrating threat detection, triage, analysis, and mitigation of the Spring4Shell vulnerability (CVE-2022-22965). - ...

Contribute to Bokbong909/patch-finder development by creating an account on GitHub.

AI Code Reviewer 是一个基于多Agent协作架构的代码审查与优化平台，通过四个专业Agent（CodeParser、SecurityAudit、PerformanceOptimizer、StyleChecker）按优先级顺序协同工作，结合长链推理能力对代码进行全方位分析——从AST结构解析、安全漏洞扫描（检测命令注入、SQL注入、硬编码凭证等10+种风险模式）、算法复杂度分析...

OWASP Security Training & Penetration Testing Lab - Ali-hey-0/owasp

I find vulnerabilities in web applications before attackers do. I test web apps, APIs, and mobile apps from an attacker's point of view. I look for flaws like IDOR, XSS, SSRF, CORS issues,...

🚀 A powerful, lightweight tool for detecting and analyzing DOM-based XSS vulnerabilities. - Mehran-Seifalinia/DOMinator

个人准备渗透测试和安全面试的经验之谈，和去部分厂商的面试题，干货真的满满~. Contribute to Leezj9671/Pentest_Interview development by creating an account on GitHub.

Simple shellcode staging loader in Csharp. Contribute to LeDucKhiem/Simple_Staging_Webserver development by creating an account on GitHub.

Contribute to kaleth4/NTLM-Relaying development by creating an account on GitHub.