Self-hosted AI web-app vulnerability scanner — HPE Private Cloud AI framework - mlyu2000/ai-vulnerability-scanner

My penetration testing dashboard - runs nmap scans, msf exploitation, and loot the information in an easily digestible browser-based workflow. - Null-H3x/h3x-dash

Defensive NGINX CVE-2026-42533 map regex risk audit with config scanner, Splunk/Defender notes, and lab evidence. - srkyn/nginx-map-risk-audit

Proof-of-concept exploit for CVE-2026-63030, a pre-authentication vulnerability in WordPress (versions 6.9.0 through 7.0.1). - administrator-01001/CVE-2026-63030

A C2 Framework (for proof of concept). Contribute to ebx32/higgsc2 development by creating an account on GitHub.

Python reimplementation of SHIRO phoneme-to-speech alignment toolkit for Japanese singing voice - wavtechyukky/pyshiro

Template-based, modular, multi-language, shellcode obfuscator and compiler - dodokaicho/staticbypass

WinDbg JavaScript extension for x86 exploit development using pattern matching, ROP scanning, format-string payload generation, and shellcode encoding from the dx evaluator. - rogdooley/osed-windbg

A hands-on Spring Boot microservices playground for experimenting with production-grade distributed-systems patterns — service discovery, API gateway routing, centralized configuration, event-drive...

Contribute to joaovicdev/EXPLOIT-CVE-2026-63030 development by creating an account on GitHub.

Hermes 一体化爬虫 MCP 服务：单进程 FastMCP + Scrapling 三层抓取 + PostgreSQL 缓存 + SSRF 防护 - majehuang/h_claw

Contribute to lightrun-platform/weblogic-poc development by creating an account on GitHub.

SOC investigation of a suspected lateral movement attack using Sysmon, Windows Event Logs, Elastic SIEM, and MITRE ATT&CK to analyze Living-off-the-Land (LotL) activity and reconstruct the ...

Bare-metal cybersecurity & edge telemetry engine. Bypasses Python interpreter bottlenecks using native C-Bridges, SIMD bitwise vectorization, and cache-aligned memory blocks for sub-millise...

Authorized bug bounty & security research writeups — methodology, recon, and detection-bypass case studies. - afuckingco/security-writeups

WordPress Core Unauthenticated RCE (CVE-2026-63030, CVE-2026-60137) - 0xjessie21/wp2shell-checker

Detect & clean up wp2shell (CVE-2026-63030) WordPress compromise — bulk-runnable, read-only by default - InstaWP/wp2shell-scan

FreePBX 未认证SQL注入导致远程代码执行，FreePBX 15 (低于 15.0.66)、16 (低于 16.0.89)、17 (低于 17.0.3)。该漏洞位于商业化“endpoint”模块中，因对用户输入过滤不严，允许未认证的攻击者绕过管理员权限，执行SQL注入，并最终实现远程代码执行 - Neobee714/CVE-2025-57819-POC

A comprehensive and growing web vulnerability scanner that aims to provide a professional report at the end of scanning - MacTash/web-cross

A Python-based Web Vulnerability Scanner that detects basic Reflected XSS vulnerabilities in authorized web applications. It analyzes responses, identifies potential vulnerabilities, and generates ...

用户用自然语言描述目标、关注漏洞、资产重要性和扫描约束，系统先用规则或 LangChain 结构化输出转成 Intent，再通过授权、域名白名单、私网和 DNS 策略门。策略通过后调用 Mock 或受控 Nuclei 扫描器。Nuclei、ZAP、Nessus 报告会被归一化成统一 Finding，通过稳定指纹去重，然后结合 CVSS、资产重要性、证据置信度做确定性风险评分。最后从 Chro...