Lab + writeup for CVE-2026-44166: PocketBase OAuth2 account pre-hijacking via unvalidated createData.email - Alardiians/pocketbase-CVE-2026-44166

A simple Python-based Vulnerability Scanner that scans common ports, detects open services, and generates a vulnerability report. The project demonstrates basic concepts of network security and pen...

Production security scanning MCP service (nmap, nuclei, TLS, DNS) - anatolykoptev/go-pentest

Burp Suite extension to detect Web Cache Deception vulnerabilities, now compatible with the Community Edition. Automates advanced cache poisoning tests and provides detailed exploit examples. - at...

Contribute to francovillagra/web-vulnerability-scanner development by creating an account on GitHub.

Contribute to djat3445-hue/Vulnerability-Scanner development by creating an account on GitHub.

Linux beacon for Cobalt Strike, works with Malleable profile - SonThanhNguyen13/CobaltStrike-Linux-Malleable-Beacon

Contribute to shouryakakkar/C2-Lab-Sliver development by creating an account on GitHub.

macOS GUI wrapper for Bumblebee vulnerability scanner from Perplexity - kai-h/bumblebee-gui

Repository of Yara rules dedicated to Phishing Kits Zip files - t4d/PhishingKit-Yara-Rules

Multi-cluster vulnerability scanner powered by Grype — grumbles when your clusters have CVEs - mental-lab/grumble

english docs. Contribute to ionutzzu12/ivanti-poc-enu development by creating an account on GitHub.

Contribute to Joel554/browser-xss-dompurify-poc development by creating an account on GitHub.

验证码安全漏洞靶场 - 包含10种常见验证码安全漏洞的教学演示平台，涵盖递增规律、种子泄露、响应回显、短信轰炸、暴力破解等真实场景，配有模拟手机界面和详细演示。仅供安全研究和教学使用 - Guojin0826/captcha-vulnerability-lab

Intentionally vulnerable Flask web app for practising SQLi and XSS attacks - Bishal-Kumar-Baishya/Vulnerability_web_app

🥷 Custom local network vulnerability scanner and automated report generator developed in C. Tests gateway connection (ICMP), audits active LAN devices (ARP), and maps critical system ports. Operati...

AI powered automated vulnerability scanner — Python + Nmap - sumit3599/AI-Security-Scanner

Practical offensive security notes — XSS, SQLi, IDOR, Command Injection and more - hellboy-zero/offensive-security-notes

Get an instant Telegram alert the moment a new CVE is published for software you run (Zabbix, Roundcube, ESXi, ...). Pure-Python, NVD-backed, runs as a service. - RedSideSecurity/CVEAlertor

A tool designed to exploit CVE-2025-54068 and Remote Command Execution if the APP_KEY of the Livewire project is known. - synacktiv/Livepyre