0-click XSS (CWE-79) in Mozilla Pocket Android v8.33.0.0 via unsanitized $(document.body).html(content) in articleview-mobile.js. Background service triggers execution without user interaction. Jav...

Burp Suite extension for Kingfisher secret scanning - andrebhu/kingfisher-burp-suite-extension

PoC script for Bludit CMS Privilege Escalation: Leveraging Stored XSS and CSRF to escalate user privileges from Author to Administrator. - AnhNg1410/Bludit-Exploitation

Spectral Analysis of Galaxy and Active galactic Nuclei - jyshangguan/GalSpec

CVE-2021-3560 — Polkit privilege escalation exploit via accounts-daemon D-Bus race condition - Jeanback1/CVE-2021-3560-exploit

This exploit is based on CVE-2019-6340 and was built upon the original exploit by leonjza and the Metasploit module, extending it can be executed multiple times against the same target without wait...

Open repository for learning dynamic shellcode loading (sample in many programming languages) - ReversingID/Shellcode-Loader

Mysql弱口令扫描工具. Contribute to lilu-yhl/mysql-weak-scan development by creating an account on GitHub.

%%{init: { 'prototype': {'__proto__': {'template': '<iframe xmlns=\"http://www.w3.org/1999/xhtml\" srcdoc=\&quot...

cybersecurity soc ransomware mitre-attack sigma threat-detection siem machine-learning python blue-team - vkmahalakshmi03/hybrid-ransomware-detection

CVE-2026-5172: buffer overflow in extract_addresses() on crafted resource record PoC - lottiedeyan/CVE20265172poc

Generate the poc for CVE-2026-4893: broken EDNS Client Subnet validation. - lottiedeyan/CVE20264893poc

MCP server on Cloudflare Workers that uploads files to your own Google Drive over plain HTTP — file bytes bypass JSON-RPC. - zenk-t-suzuki/gdrive-upload-mcp

OXIDE Framework v8.4.9 — AI-augmented web vulnerability scanner written in Rust. Features 15+ scanners (SQLi, XSS, LFI, CORS, TLS, creds, etc.), WAF bypass engine, ML-driven zero-day detection, Ins...

Contribute to vulntestaj2-byte/poc-tpl-rce development by creating an account on GitHub.

C# command-line tool for reading and modifying Active Directory-Integrated DNS (ADIDNS) records over LDAP. - RedteamNotes/SharpADIDNS

languages folder. Contribute to ionutzzu12/ivanti-poc-loc development by creating an account on GitHub.

Contribute to abc1230940/SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298 development by creating an account on GitHub.

可移植的逆向分析 SKILL 技能，驱动 IDA + WPeGPT 插件，对 PE/ELF 进行三种模式的自动化分析（轻量/全量/漏洞），输出分析报告。支持 SKILL 技能机制的 AI Agent 均可加载使用。 - WPeace-HcH/WPeGPT-Analyzer

Built a local web penetration testing lab using Flask and SQLite, simulating SQL injection, reflected XSS, and IDOR vulnerabilities. Implemented secure fixes with parameterized queries, output enco...

A critical Server-Side Template Injection (SSTI) vulnerability exists in the X-Trading Portal v1.4.2 dashboard metadata rendering engine. The flaw is due to improper sanitization of user-controll...