授权式本地自动化渗透测试桌面工具。PenScope 是一款面向安全测试人员 / 授权渗透测试场景的桌面应用。它把端口扫描、Web 漏洞扫描（SQL 注入、XSS、CSRF、文件上传）、利用验证、报告生成等工作流整合在一个原生窗口中，所有逻辑都在你本机运行，不依赖任何远程服务器，也不需要账号密码。 - wanlqx/PenScope

An End-to-End AWS Serverless PoC demonstrating the Saga Pattern, distributed transactions, and automated microservice rollbacks using Spring Boot and Step Functions. - jamesiit/distributed-ride-hai...

A Python-based web vulnerability scanner that identifies missing security headers, scans open ports, checks SSL/TLS configurations, detects directory listing, and discovers common web security vuln...

Full Boot2Root writeup for TryHackMe's "Do Not Disturb" room (Hacker Holidays 2026) — NoSQL injection auth bypass → EJS SSTI/RCE → exposed Node inspector abuse → disk-grou...

Manual web application penetration testing of OWASP Juice Shop using Burp Suite Community Edition. Identified and validated SQL Injection, XSS, Broken Access Control, Sensitive Data Exposure, and B...

CVE-2026-64531 (OVSwrap) PoC - Linux kernel Open vSwitch LPE; for patch validation and security research - HackSpeak/ovswrap-poc

极域电子教室 UDP 重放攻击研究与渗透测试工具集. Contribute to yangsongh/JiyuUdpAttack development by creating an account on GitHub.

A lightweight Python vulnerability scanner that maps open ports and service banners to known CVEs. - Crow-developers/vulnscope

CVE-2026-16232 (Check Point SmartConsole authentication bypass) PoC - unauth to admin; for authorized security testing - HackSpeak/checkpoint-smartconsole-poc

CVE-2026-60004 — Gitea/Forgejo Diffpatch Git Hook RCE. Bare clone → post-index-change hook injection. CVSS 9.8 | CWE-94 | Gitea < 1.27.1 - shinthink/CVE-2026-60004

Find fastjson in your JARs and Spring Boot fat-JARs, and check exposure to CVE-2026-16723. Zero dependencies, fully offline. 一条命令排查 fastjson 漏洞影响范围。 - xiaoqiMikko/fastjson-check

Bibliotek for å validere tokens fra Wonderwall og utføre On-Behalf-Of Exchange mot både Azure og IDporten - navikt/oasis

CVE-2026-66066 (KindaRails2Shell) PoC - Rails Active Storage/libvips arbitrary file read to RCE; for authorized security testing - HackSpeak/kindarails2shell-poc

Walkthrough for Codify (Linux - Easy). Exploits vm2 RCE (CVE-2023-30547), SQLite DB hash extraction, Bcrypt cracking with John, and Privilege Escalation via Bash wildcard comparison in `mysql-back...

GhostLock (CVE-2026-43499) kernel exploit port for REDMI K90 Pro Max Taiwan firmware (myron, WPMTWXM) — offsets, build guide, prebuilt binary - jason5545/ghostlock-myron-tw

Hi, I'm Naveen 👋 I'm an Associate Software Engineer at Tech Mahindra, based in Hyderabad, India, with about a year and a half of experience building backend systems and full-stack...

Turn a Microsoft-signed binary into a red team implant — no admin rights, no custom signing. ClickOnce delivery via AppDomainManager hijack with shellcode execution, file drop, reverse SSH + SOCKS5...

Detect fake-job-interview malware before it runs. safe-install scans npm repos for the Contagious Interview (DPRK) attack, checks sites for ClickFix clipboard hijacks, and guides incident response ...

Proof-of-Concept exploit for CVE-2026-15409 (SonicWall SMA 1000 RCE) via Erlang distribution over WebSocket. Achieves unauthenticated remote code execution as couchdb user. - Ch4120N/CVE-2026-15409

Contribute to sam00/POC-CVE-2026-54121-Certighost- development by creating an account on GitHub.

edr bypass kit dz. Contribute to rootdz1337/edr-bypass-kit- development by creating an account on GitHub.