OPPO Find N2 GhostLock (CVE-2026-43499) exploit adaptation - pubglite55/oppo-ghostlock

Contribute to iagosantostech/xss-poc development by creating an account on GitHub.

Security researcher's BurpSuite plugin collection 2026: non-BApp extensions, custom Java plugins, request tools, SQLMap integration, Shiro & WAF scanners, Python automation scripts....

Burp Suite extension exposing a security-aware MCP server over SSE, giving AI assistants structured access to Burp's scanner, sitemap, scope, cookies, and annotations - tcyph3r/burp-mcp-companion

CPM PoC: evil Stable Diffusion WebUI extension (JHU 601.441 research) - Honeymalik007/cpm-poc-sdwebui-ext

Ghostlink HTB — Full Chain AD + Gogs Exploitation | MQTT → NTLM Relay → Path Traversal → CVE-2025-8110 → ADCS ESC11 → DCSync | AMN SECURITY - amnsecurity/ghostlink-writeup

An educational, intentionally vulnerable Laravel security lab for practicing web penetration testing and secure code review (SQLi, Stored XSS, Path Traversal, CSRF, IDOR). Graduation project for DE...

PoC for CVE-2026-56423: MISP deleteSelection broken access control (CWE-862, contributor hard-deletes other orgs' Event Reports/Sharing Groups, CVSS 8.8) - BiiTts/CVE-2026-56423-MISP-delete...

Enterprise web vulnerability scanner — 17 test modules, 5 report formats, YAML config, OWASP mapping, REST API, webhooks, and 122 tests. Built for authorised pentesting and CI/CD pipelines. - S1YOL...

西电网安生产实习-漏洞复现实战笔记. Contribute to well-of-little/DVWA-Pentest-Report development by creating an account on GitHub.

SSRF-safe scan/egress authorization + tamper-evident audit for Go — the guardrail that stops outbound tools (scanners, crawlers, fetchers) from reaching internal infra or running unauthorized/dange...

Web vulnerability scanner in Python — 26 test modules, headless-browser (JS/SPA) crawling, REST/JSON API fuzzing, 5 report formats, OWASP Top 10 mapping, enterprise auth, REST API server, and 140 t...

SploitScan - CVE-PoC Monitoring Data (Auto-updated by GitHub Actions) - w4n95/SploitScanData

A Proof of Concept (PoC) exploit for CVE-2026-46331 - aexdyhaxor/CVE-2026-46331

一个fscan项目解析网站工具. Contribute to gmeier909/fscan_parse development by creating an account on GitHub.

Web Application Security Testing of DVWA in an Authorized Laboratory Environment - Shreyasi-Techie/dvwa-web-application-security-assessment

Proof of Concept for Reflected XSS in Lucee CFML (CVE-2026-29519) - L4V4D0/CVE-2026-29519-Lucee-Reflected-XSS

CVE-2026-8451 - Citrix NetScaler SAML Memory Overread (CitrixBleed) - PoC & Analysis | CVSS 8.8 | AMN SECURITY - amnsecurity/CVE-2026-8451-CitrixBleed

CVE-2026-45659 - Microsoft SharePoint Deserialization RCE - PoC & Analysis | CVSS 8.8 | AMN SECURITY - amnsecurity/CVE-2026-45659-SharePoint-RCE

Minimal, dependency-free MCP server for AI security agents — CVE lookup (OSV.dev), Shodan host recon, and local Nuclei scan orchestration over the Model Context Protocol. - bharat3645/voraxx-mcp-se...

☢️ ReactorWatch v3.2.1 — Nuclear Reactor Core Monitoring System Pentest | CVE-2025-55182 (React2Shell) Unauthenticated RCE → SQLite Exfil → MD5 Crack → SSH Pivot → CDP Root Escalation | CVSS 10.0 |...