Web application penetration testing report on testphp.vulnweb.com (Acunetix's intentionally vulnerable test app) — covering SQL Injection, authentication bypass, reflected & stored ...

A lightweight, Python-based vulnerability scanner designed to detect common security flaws, open ports, and outdated software configurations in target systems. Developed as a mini project. - balaji...

Develop a Burp Suite extension (using Java with the Montoya API) that exports all logged HTTP requests and responses from the Proxy History, applying intelligent filtering, deduplication, and summa...

CVE-2026-33017 exploitation tool for Langflow <1.9.0. Features reverse shells, command execution, file operations, persistence, and automated testing. Validates critical RCE vulnerability im...

CVE-2025-64512: pdfminer.six pickle deserialization rce; pickle.gz + pdf generator w/ custom payloads - matesz44/CVE-2025-64512

Web application vulnerability scanner built for learning pentesting — Flask backend, live dashboard, multi-module scan engine - NamdevShivansh/SENTRIX

📦 Application web sécurisée de gestion de stock orientée Merchandising. Projet réalisé après 2 mois de formation. Focus sur la robustesse du code et la protection contre les failles XSS (sans frame...

Command-line web vulnerability scanner that runs the OWASP Top 10 (2021) against a target URL. Colorful terminal output and a styled HTML report. - dx7er/plankton

AI-enhanced website vulnerability scanner with Gemini-powered security insights. - atikshded/WatchTower-AI

Spring Cloud Gateway 整合 Spring Security，基于响应式实现网关与鉴权功能的融合 - zk1991-github/spring-cloud-gateway-security

Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026. - DavidCarliez/CVE-2026-49176_LPE_POC

ADB 2026-0073 Proof Of Concept RCE. Contribute to lilsheepyy/ADB-2026-0073-POC development by creating an account on GitHub.

Read-only WordPress plugin that scans for artifacts of the wp2shell exploit chain (CVE-2026-63030 / CVE-2026-60137) - eyesecurity/wp2shell-compromise-scanner-plugin

Network vulnerability scanner: host/port discovery (nmap), CVE lookup via NVD API, per-device risk scoring, CLI and Streamlit web interface - hfs-ch/network-vulnerability-scanner

A modern PySide6 desktop vulnerability scanner with multi-threaded port checks, CVE lookups, PDF reporting, and subnet scans. - Sarjin744/desktop-vulnerability-scanner

Hands-on application-security lab covering SQL injection, XSS, CSRF, command injection, file-upload risks and OWASP Top 10 remediation using DVWA, Docker and Burp Suite. - bilalahmedss/Application-...

Red Track Burp Extension. Contribute to OtherPeoplesEnemy/Redtrack-Burp development by creating an account on GitHub.

Open-source threat intelligence console. Aggregates live CVEs (NVD), CISA KEV, EPSS exploit scores, abuse.ch IOCs, active C2 servers on a global map, data breaches, and infosec news into one dark-...

Gravitee-style dynamic upstream routing for Kong Gateway OSS — header/template-based endpoint override with SSRF-safe allowlisting - davidgrldo/kong-dynamic-upstream

SSRF-style URL policy validation for Swift, with a WHATWG-conformant host parser. Foundation-only, no dependencies. - adamtheturtle/SafeURLKit

[CVE-2026-63030/CVE-2026-60137] Pre Authentication RCE in WordPress Core - N45HT/wp2shell