Security scanner for MCP servers — vet an MCP before you wire it into an agent. Detects prompt-injection, credential exfiltration (via taint analysis), RCE, and supply-chain risks, and catches cros...

Intentionally vulnerable e-commerce web app (PHP/MySQL + Node.js/MongoDB) built for hands-on penetration testing practice. Covers 13 documented vulnerabilities across SQLi, NoSQLi, XSS, IDOR, CSRF,...

【Python计算机毕业设计分享】基于Python的注入漏洞扫描工具研究及防护实现，MySQL Python开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - ijabyregra/tGkuZBPPIg

This repository provides a complete, pre-configured environment for web hacking practice, including the classic **SQLi-Labs** and integrated **WAF Bypass Labs** (Java/Tomcat), all running seamlessl...

A light weight vulnerability scanner in development phase - shubhamrawat0044/SecureScan

【Java计算机毕业设计分享】基于Jboss的渗透测试管理系统，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - ibislon/TatvjrhSOt

BCheck Helper is a Burp Suite extension that helps finding and importing BChecks scripts into Burp. These can easily be loaded from either a GitHub repository, network fileshare or a local filesyst...

An AI driven, authorized bug bounty toolkit. A browser extension and a Burp extension feed a local agent that runs recon, scope gated probing, triage, exploit chaining, CVSS, PoC, and report ready ...

Suka suka lah. Contribute to BimaBalance/Cve-2026-27944-Tools-Exploit development by creating an account on GitHub.

Praxion — Cross-platform USB malware scanner that auto-detects removable drives, scans files with YARA rules, PE/ELF/Mach-O analysis, ClamAV, and VirusTotal, then quarantines threats automatically....

Debugger for macOS. Multi-pane TUI wrapping lldb: syscall/network tracer, anti-debug bypass, memory search. For reverse engineers and malware analysts. x64dbg-alternative for Apple Silicon. - MZHea...

Local AI-augmented offensive-security scanner: attack surface, CVE+exploitability, client-side intel, lab-mode verification, exploit-chain correlation. Authorization-gated. - supamanluva/Celsius

A Command and Control Framework to be released for Ubuntu 20.04/22.04 - itsnold/Nagomio-C2

"A next-gen AI-powered vulnerability scanner that detects security flaws in real-time using Gemini 1.5 Flash. Features a War-Room dashboard, Breach Simulator, and a brutal AI 'Roas...

 CVE-2026-49049 - Unauthenticated File Deletion, Arbitrary Write & XSS Injection for Helix3 Joomla Extension - frada321/asdsadsadasdasdsadsad

Week 1 – Cybersecurity Internship task: hands-on Reflected & Stored XSS exploitation using PortSwigger Web Security Academy (legal, sandboxed labs). - adan-fatima1/mtech-internship-week1-xss

Modern, High-Performance Vulnerability Scanner. Features: Spider Crawler, Chaos Fuzzer, and RAM-based Exploit-DB integration. - MrEx-Right/DORM

Product Video Gallery for Woocommerce <= 1.5.1.8 - Authenticated Stored Cross-Site Scripting Proof of Concept - Ravi-lk/CVE-2026-10104-POC

Un vulnerability scanner scritto in Python per l'analisi automatizzata di applicazioni web. - Nicconcello/Vulnerability-Scanner

CPM vulnerability PoC hosting for koodo-reader XSS research (JHU EN.601.641) - Honeymalik007/cpm-koodo-poc

Contribute to rz1027/CVE-2026-20896 development by creating an account on GitHub.