Security Advisory: Stored XSS via Content Tag Names - Microweber CMS 2.0.20 - theopaid/Stored-XSS-via-Content-Tag-Names-Microweber-

Automated Code Quality & Vulnerability Scanner enterprise system built with TypeScript / Next.js React App - ejajmahmud/code-security-scanner-nextjs-ts-v50

Passive attack-surface mapper for Burp Suite. Watches HTTP traffic, deduplicates endpoints, presents them in a live table. - Raunaksplanet/Atlas-burpsuite-extension

Burp Suite extension that serves a custom HTML webhook page via a dedicated local HTTP server - KaiHT-Ladiant/BurpCustomHook-archived

Chocolatey package for Grype, a vulnerability scanner for container images and filesystems - marcinbojko/grype

ART Framework — presentation framework for Slay the Spire (C1/C2 dual-track UI) - ZJustin117/ArtFramework

Contribute to osama-moussa/Zeus-Malware-Hunt-lab-with-Suricata-Splunk-Volatility-YARA development by creating an account on GitHub.

Chat with any website — paste a URL, get a grounded AI conversation about its actual content. Next.js 16 + Prisma 7 + Gemini, built portfolio-grade with full CI/CD, testing, and SSRF-hardened scrap...

Incident response investigation of a compromised Windows endpoint. Reconstructed the full attack chain using Sysmon logs, Windows Event Logs, and network packet capture covering initial access, ...

Contribute to leosp1983/log4j development by creating an account on GitHub.

CVE-2026-49176 WalletService LPE — standalone PoC + Cobalt Strike BOF (SYSTEM command on interactive session) - 777erp/CVE-2026-49176_BOF

A Selenium-based web vulnerability scanner · HTTP/HTTPS · 323 techniques · HackerOne-format reports (auto CWE/CVSS) - Nemesis-Tools/Nemesis-Python

Conducted VAPT on Altoro Mutual (testfire.net) in a controlled lab using Kali Linux, Burp Suite, Nmap, and SQLmap. Performed reconnaissance and security testing, identifying SQLi, Stored/Reflected ...

Scanner de logiciels malveillants portable et multi-moteur pour Windows, utilisant SHA-256, YARA, ClamAV et Microsoft Defender, avec des rapports JSON unifiés. - PotateBulle/Portable-Malware-Scanner

A custom Python-based vulnerability scanner that detects open TCP ports, fingerprints active services, and identifies default web page misconfigurations. - dinalliyanage/python-simple-vulnerability...

CORS + XSS Attack POC - CyberStrikeAI. Contribute to jiangrun0213/cors-poc development by creating an account on GitHub.

CVE-2026-61511 – vBulletin Pre-Auth RCE (CVSS 9.8). Vuln 5.x/6.x (unpatched). Multi-exploit via Endpoint Pool, AJAX, PHPFuck WAF bypass. Full toolkit: reverse shell, proxy, persistence, webshell, d...

CVE-2026-43499 exploit adapter for MT6985 MediaTek Dimensity 9300 (vivo PD2241) - 233laoliu/mt6985-CVE-2026-43499

FastAPI server using Playwright to fetch web content and screenshots. Bypasses Cloudflare/WAF — gets clean article text when plain HTTP fails. - ZaZ712/playwright-web-fetcher

Critical vulnerability PoC for StUSDS , Admin backdoor via cut() allows theft of all user funds - krittidet007/stusds-exploit-poc

应急响应取证分析 — 11维检测 + 6源威胁情报. Contribute to wushulin111/ir-forensic-analysis development by creating an account on GitHub.