All Nuclei Templates. Contribute to adampielak/nuclei-templates development by creating an account on GitHub.

Simple xss vulnerable web forum application aimed to test ways to execute stored xss attacks - anderson2dev/xss-lab

Contribute to 0x00phantom-hat/Hoverfly-1.11.3-RCE-CVE-2025-54123-Exploit development by creating an account on GitHub.

Contribute to LeenearKeenear/yara-grep development by creating an account on GitHub.

PoC — WonderCMS 3.6.0 Stored XSS (GHSA-5x7j-xjpx-pmm5) - BlessedOn3/poc-wondercms-360-xss

KVC enables unsigned driver loading via DSE bypass (g_CiOptions patch, skci.dll hijack, SeCiCallbacks redirection) and PP/PPL manipulation for LSASS memory dumping on modern Windows with HVCI/VBS. ...

PoC — iabdullahmumtaz/DeployHive Unauthenticated RCE via Docker + npm (CVSS 10.0) - BlessedOn3/poc-deployhive-unauth-rce

PoC — pqhaz3925/ccweb Unauthenticated RCE via Claude Code (CVSS 10.0) - BlessedOn3/poc-ccweb-unauth-rce

Next-generation TCP/IP fingerprint alignment platform. Bypass Cloudflare, Akamai, Imperva & F5 WAF with uTLS JA3/JA4 spoofing, TCP/IP SYN tuning, HTTP/2 stream manipulation, and global DNS ...

loader. Contribute to 6K4P-lamp/simple_shellcode_loader development by creating an account on GitHub.

Perform mutation testing on individual Java files with coverage analysis and differential mutation to improve test effectiveness efficiently. - tonguingandgroovingplanevulvitis603/mutate4java

Burp Suite extension + CLI that scrubs client identity (hostnames, IPs, brand names) from pentest traffic before it reaches AI assistants. Drop-in Claude Code hook integration. Java 17, no Python. ...

CurlCraft lets you paste any cURL command directly into Burp Suite and send it to Repeater or Intruder in one click — supporting REST, SOAP, GraphQL, multipart, and URL-encoded requests out of the ...

Windows 10/11 双网卡(外网+内网)路由一键配置与恢复工具，纯 Python 标准库 + tkinter GUI，支持自动备份/恢复、UAC 提权、DHCP 默认路由守护 - MushGrowth/dual-nic-route-tool

PoC and Security Advisory for Typecho GetText Plural-Forms eval() Remote Code Execution (CWE-95) - dudu88485n-ctrl/Typecho-GetText-eval-RCE-PoC

Open-source ICS/OT detection rules (Wazuh + Sigma) for Modbus, DNP3, IEC 104, MQTT, and OPC-UA — tested against a real OpenPLC + GNS3 digital twin lab. - Sbharadwaj05/ot-sentinel

A minimal HTTP server for XSS PoC or authorized pentest engagements. - redaxn/http-server

Contribute to Bhanunamikaze/BadHost-CVE-2026-48710-Exploit development by creating an account on GitHub.

Burp Suite proxy extension for decoding MessagePack serialized websocket messages. - 3ncy/msgpack-burp