CVE-2026-66066 + File Read, RCE, Scanner, Lab . Contribute to 0xsha/KindaRails2Shell development by creating an account on GitHub.

A critical vulnerability affecting Fastjson versions 1.2.68 – 1.2.83. - 1xPwn/CVE-2026-16723

Cloud security scanning: IAM privilege escalation, public S3 buckets, SSRF metadata exfiltration - S0hamRay/Warden

A polite, security-conscious web crawler & scraper in Python. Respects robots.txt and rate limits, guards against SSRF, and exports structured data as JSON Lines. - mojtaba-py-code/web-scraping

Burp Suite extension for automated multi-tenant IDOR detection - Ziffrit/tenant-isolation-mapper

GhostLock (CVE-2026-43499) exploit for POCO F3 GT (aresin) — MediaTek Dimensity 1200, Linux 4.14.186 ARM64 kernel privilege escalation via futex PI chain manipulation - NothingFumo/ghostlock-aresin

【Java计算机毕业设计分享】基于SSM的漏洞扫描器管理系统，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - nib82096oz/oiXLBBopLC

【Java计算机毕业设计分享】基于Django的防Web漏洞人事管理系统，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - d558mju7m2/MVoiTmeUMb

PCAP dosyalarinda C2 beacon, DNS tuneli ve veri sizintisi arayan ag analiz araci - onurtnc/netsentry

VulnSight is a Python-based automated vulnerability scanner that uses Nmap and the NVD API to identify open ports, detect services and software versions, correlate vulnerabilities with known CVEs, ...

Demonstrated SQL Injection, Stored XSS, and CSRF vulnerabilities using DVWA in a safe Docker environment and documented secure mitigation techniques. - KONDAMADHAN/Web-Vulnerability-Assessment-DVWA

Educational Node.js web security app demonstrating Stored/Reflected XSS attacks and context-aware HTML entity escaping defenses. - tahniatfarhan/xss-vulnerability-prevention-demo

VulnLedger — open-source SBOM generator and vulnerability scanner CLI. CycloneDX/SPDX, 20+ ecosystems. - SaadEddine-ware/Vulnledger

Unofficial Gitleaks integration/extension for Burp Suite - TheArqsz/BurpSuite-Gitleaks-Extension

【Java计算机毕业设计分享】基于Jboss的渗透测试研究平台，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - n6jx7ld0er/EQhJdxozoK

Lightweight Windows EDR — ETW agent, mTLS transport, FastAPI backend, Sigma/YARA detection engine, and React dashboard with response actions. MITRE ATT&CK mapped. - Ayyadi266/LightEDR

Modular command and control for redteam operations. - farinap5/PurpleCommand

Small, domain-free Go building blocks: structured logging, an HTTP client with retries and SSRF guarding, GoFiber helpers, a stale-while-revalidate cache, and a SQLite migration runner. - neodata-i...

Jython (Burp extension) implementation of Google's csp-evaluator project - TheArqsz/csp-evaluator-burp

Authenticated Blind OS Command Injection in ClearOS - LazyTitan33/CVE-2026-67599_ClearOS_RCE