ToxNetV2 C2 framework with bot_stub scanner. Contribute to dsagt315fgvds/ToxNetV2 development by creating an account on GitHub.

Abdal CVE-2026-63030 is a professional WordPress vulnerability scanner designed to detect exposure to CVE-2026-63030 through version analysis and REST API security checks. Developed by Ebrahim Shaf...

Hands-on vulnerability management case study: how Wazuh flagged a real SSRF (CVE-2025-68616) in WeasyPrint, and how I reproduced and patched it. - rauljvc8/CVE-2025-68616-Detecting-and-Patching-an-...

CVE-2026-63030 - WordPress Core Pre-Auth RCE Mass Exploit - ChiefYoru/CVE-2026-63030_PoC

A scanner and proof-of-concept toolkit for CVE-2026-63030 (wp2shell) — pre-authenticated remote code execution in WordPress core - fullhunt/wp2shell-scan

Unauthenticated Remote Code Execution in Astroid Framework 2.0.0 - 3.3.10 for Joomla - ChiefYoru/CVE-2026-21628_PoC

wp2shell - WordPress RCE & PoC (CVE-2026-63030 + CVE-2026-60137) - JohenLastGen-JLG/wp2shell

iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution. - ChiefYoru/CVE-2026-48939_PoC

Blackbox, non-intrusive detector for wp2shell (WordPress core pre-auth RCE, CVE-2026-63030 / CVE-2026-60137). Detection only. - own2pwn-fr/wp2shell-detect

Automate security testing tasks with this curated collection of Burp Suite scripts, extension samples, and workflow helpers. - mohiteprathamesh369-a11y/mohiteprathamesh369-a11y.github.io

Automate Burp Suite tasks with this collection of extension scripts and security testing helpers for efficient web application assessments. - mohiteprathamesh369-a11y/burp-suite-executor-scripts

PoC for CVE-2026-46420, command injection in shivammathur/setup-php via repository-controlled PHP version resolution. - Jvr2022/CVE-2026-46420

The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE. - ChiefYoru/CVE-2026-56291_PoC

Contribute to adios255/awareness-edr-tamper-bypass development by creating an account on GitHub.

Lightweight MCP proxy that consolidates multiple MCP servers into single meta-tools — bypass per-client tool limits without losing functionality - sevket/mcp-proxy

Distributed dependency vulnerability scanner with Spring Boot, RabbitMQ, OSV API, scan history, Redis caching, and resilient asynchronous processing. - gustavogeraldelli/dependency-vulnerability-sc...

Contribute to coolnn/dom-based-xss-lab development by creating an account on GitHub.

A Python-based web vulnerability scanner designed to detect security issues such as missing HTTP headers, insecure configurations, and basic web vulnerabilities. - elidiosozinho/vulnerability-scanner

Newly published and newly exploited security vulnerabilities three times a day, translates each one from dense technical language into plain English, and surfaces the remediation that the source it...

Signed device profiles, mobile exploit payloads, and KernelSU artifacts for Root My Galaxy - BuSung-dev/Root-My-Galaxy-Payloads

Professional Web Application Penetration Test Report for OWASP Juice Shop including reconnaissance, enumeration, vulnerability assessment, exploitation, and remediation recommendations. - Vicks298/...