burp插件tcp抓包改包. Contribute to keiokr/burp-cn-NoPE development by creating an account on GitHub.

This repository hosts the Automated Vulnerability Scanner Dashboard, a Python/Flask web app integrating Nmap, WhatWeb, and Nikto for unified security assessments. It features an automated risk-scor...

PoC: módulo de Gestión de Pedidos de Repuestos B2B (Fanalca) — Java 17 + Spring Boot 3 (Clean Architecture), PostgreSQL 16 + Flyway, Angular 22, Docker Compose - roberthmartinezv/gestion-pedidos

log4j 2025/2026 年 7 条「配置静默失效」CVE 自查:按 CVE×模块 判定 4 个模块,结构化解析 log4j2 配置做 applicability 降噪,并算出该升到哪个版本才一次到位(6 条写 2.25.4,但有一条要 2.25.5,而它 Dependabot 报不出来) - xiaoqiMikko/log4j-check

Scanner: CVE-2026-0300 PAN-OS User-ID Captive Portal Buffer Overflow RCE — Python CLI for detecting actively exploited BOF vulnerability in Palo Alto firewalls (CISA KEV 2026-05-13) - ridhinva/pano...

Reproducible Docker lab for the Apache Tomcat JNDIRealm GSSAPI authentication bypass - mdvpat/CVE-2026-55957-PoC

CVE-2026-31431 / Copy Fail Linux kernel vulnerability checker - algif_aead attack path detection - ridhinva/linux-kernel-algif-aead-checker

Scanner: CVE-2026-3854 GitHub Enterprise Server Pre-auth RCE via Push Option Injection — Python checker (CISA KEV) - ridhinva/ghe-push-option-rce-scanner

Scanner: Generic vulnerability scanner — web, network, and config checks in Python - ridhinva/vuln-scanner

Scanner: CVE-2026-9082 Drupal PostgreSQL SQLi via JSON:API — Python scanner for unauthenticated SQLi leading to RCE (CISA KEV) - ridhinva/drupal-jsonapi-sqli-scanner

Scanner: CVE-2026-1731 BeyondTrust Remote Support Pre-auth RCE — Python checker for actively exploited vulnerability (CISA KEV) - ridhinva/beyondtrust-rce-scanner

PoC: h2 duplicate Host header request smuggling primitive (CVE pending) - SunandM/poc-h2-duplicate-host

PoC for CVE-2026-71554 — h2 duplicate Host header request smuggling primitive (fixed in 4.4.1) - SunandM/poc-h2-CVE-2026-71554

Wormable exploit for CVE-2026-57858. Contribute to zylideum/CVE-2026-57858 development by creating an account on GitHub.

A technical demonstration of exploiting Stored Cross-Site Scripting (XSS) to exfiltrate administrative tokens, perform session hijacking, and expose plaintext credentials in a mock web application....

Scanner: Web3/DeFi smart contract vulnerability scanner — reentrancy, oracle manipulation, flash loans, governance attacks in Python - ridhinva/web3-defi-scanner

A simple PoC on the Remote Code Execution (RCE) Vulnerability of CraftCMS designated as CVE-2025-32432 written in Go - EzraMansor/CVE-2025-32432-PoC

Scanner: OWASP API Top 10 2023 + GraphQL security scanner — BOLA, BFLA, SSRF, introspection leaks, depth DoS in Python - ridhinva/api-security-scanner

Template Nuclei para detecção não-intrusiva do XSS2Shell, um parser differential pré-autenticado no WordPress Core que permite injeção de elementos DOM na página de login, servindo de base para uma...

extension Tools & Packers – A professional-grade Windows toolkit for advanced payload generation, obfuscation, and analysis for security research. - carped-955514-terry/PayloadGenerator-Adv...

Toolkit: Modular exploit development — protocol fuzzer, payload generator, ROP builder, shellcode encoder in Python - ridhinva/Exploit-Dev-Toolkit