PoC — WonderCMS 3.6.0 Stored XSS (GHSA-5x7j-xjpx-pmm5) - BlessedOn3/poc-wondercms-360-xss

KVC enables unsigned driver loading via DSE bypass (g_CiOptions patch, skci.dll hijack, SeCiCallbacks redirection) and PP/PPL manipulation for LSASS memory dumping on modern Windows with HVCI/VBS. ...

PoC — iabdullahmumtaz/DeployHive Unauthenticated RCE via Docker + npm (CVSS 10.0) - BlessedOn3/poc-deployhive-unauth-rce

PoC — pqhaz3925/ccweb Unauthenticated RCE via Claude Code (CVSS 10.0) - BlessedOn3/poc-ccweb-unauth-rce

Next-generation TCP/IP fingerprint alignment platform. Bypass Cloudflare, Akamai, Imperva & F5 WAF with uTLS JA3/JA4 spoofing, TCP/IP SYN tuning, HTTP/2 stream manipulation, and global DNS ...

loader. Contribute to 6K4P-lamp/simple_shellcode_loader development by creating an account on GitHub.

Perform mutation testing on individual Java files with coverage analysis and differential mutation to improve test effectiveness efficiently. - tonguingandgroovingplanevulvitis603/mutate4java

Burp Suite extension + CLI that scrubs client identity (hostnames, IPs, brand names) from pentest traffic before it reaches AI assistants. Drop-in Claude Code hook integration. Java 17, no Python. ...

CurlCraft lets you paste any cURL command directly into Burp Suite and send it to Repeater or Intruder in one click — supporting REST, SOAP, GraphQL, multipart, and URL-encoded requests out of the ...

Windows 10/11 双网卡(外网+内网)路由一键配置与恢复工具，纯 Python 标准库 + tkinter GUI，支持自动备份/恢复、UAC 提权、DHCP 默认路由守护 - MushGrowth/dual-nic-route-tool

PoC and Security Advisory for Typecho GetText Plural-Forms eval() Remote Code Execution (CWE-95) - dudu88485n-ctrl/Typecho-GetText-eval-RCE-PoC

Open-source ICS/OT detection rules (Wazuh + Sigma) for Modbus, DNP3, IEC 104, MQTT, and OPC-UA — tested against a real OpenPLC + GNS3 digital twin lab. - Sbharadwaj05/ot-sentinel

A minimal HTTP server for XSS PoC or authorized pentest engagements. - redaxn/http-server

Contribute to Bhanunamikaze/BadHost-CVE-2026-48710-Exploit development by creating an account on GitHub.

Burp Suite proxy extension for decoding MessagePack serialized websocket messages. - 3ncy/msgpack-burp

收录了GitHub上的一些优质漏洞库，并提供一键下载与更新功能。It includes some high-quality vulnerability libraries on GitHub and provides one-click download and update functions - YZBRH/VulnerabilityLibrary

Sigma rules for iTrust6G project. Contribute to PDMFCSA/it6g-sigma development by creating an account on GitHub.

Exploit for CVE-2025-47227 - ScriptCase Password Reset (Pre-Auth) - Outs1d3r-Net/cve_2025_47227

Repository describes behavior of some malwares in detailed reports. There are reports and if needed - custom YARA (or other) rules, scripts etc. - Arrbat/MALWARE_ANALYSIS

kubernetes scripts and labs. Contribute to elevy99927/k8s development by creating an account on GitHub.

ICE 是一款面向渗透测试人员的综合工具集. Contribute to Ga047/ICE development by creating an account on GitHub.