Scanner: Web3/DeFi smart contract vulnerability scanner — reentrancy, oracle manipulation, flash loans, governance attacks in Python - ridhinva/web3-defi-scanner

A simple PoC on the Remote Code Execution (RCE) Vulnerability of CraftCMS designated as CVE-2025-32432 written in Go - EzraMansor/CVE-2025-32432-PoC

Scanner: OWASP API Top 10 2023 + GraphQL security scanner — BOLA, BFLA, SSRF, introspection leaks, depth DoS in Python - ridhinva/api-security-scanner

Template Nuclei para detecção não-intrusiva do XSS2Shell, um parser differential pré-autenticado no WordPress Core que permite injeção de elementos DOM na página de login, servindo de base para uma...

extension Tools & Packers – A professional-grade Windows toolkit for advanced payload generation, obfuscation, and analysis for security research. - carped-955514-terry/PayloadGenerator-Adv...

Toolkit: Modular exploit development — protocol fuzzer, payload generator, ROP builder, shellcode encoder in Python - ridhinva/Exploit-Dev-Toolkit

A fast, open-source, template-driven vulnerability scanner for bug bounty - tuangatech/hacker-five

This exploit is based on CVE-2017-9757 and was built upon the original exploit by 0x09AL. - joaoaugustom/IPFire_2.19_RCE_Authenticated

深度渗透测试 AI Skill | Deep Penetration Testing Methodology — 黑盒渗透 + 白盒审计 + Multi-Agent 协同，以顶尖漏洞挖掘专家标准执行安全测试 - liuzhiyong/pentest-deep-dive

Contribute to Saku0512/CVE-2026-71557-poc development by creating an account on GitHub.

CVE-2026-64638: WordPress Pre-auth XSS → RCE (XSS2Shell) PoC - imbas007/CVE-2026-64638-POC

Zapscape (CVE-2026-64561) KVM/x86 shadow MMU UAF guest-to-host escape PoC mirror — V4bel/@v4bel, MIT; for authorized security testing - HackSpeak/CVE-2026-64561

Contribute to soluzka/antivirus-yara-rules-c development by creating an account on GitHub.

Taint is a PHP extension, used for detecting XSS codes - laruence/taint

PoC for CVE-2026-18953 — arbitrary file write (CWE-22) in awslabs.aws-transform-mcp-server's get_resource tool via the savePath parameter - ronamosa/CVE-2026-18953

Burp Extension for parameter shenanigans . Contribute to fire0088/BananaExtractor development by creating an account on GitHub.

Integrated Security Testing Environment for Web Applications as Burp Extension. - okuken/integrated-security-testing-environment

**Seamless, Zero-Prompt & Kernel-Verified Cross-Platform Privilege Escalation Framework** 专为桌面客户端打造的无感、轻量、高安全的跨平台（Windows / Linux / macOS）提权 SDK。 - xyz1001/elevate-kit

简单的 Web 漏洞扫描器（端口扫描 + 目录扫描 + 简单漏洞 POC）. Contribute to Judy-0206/web-vuln-scanner development by creating an account on GitHub.

Local network vulnerability scanner. Contribute to miiidev/blacklight-cli development by creating an account on GitHub.

Penetration testing & VAPT lab write-ups — web application, API, Android, and red team security research. Structured reports with methodology, PoC, and remediation guidance. - sana6086/Poc-labs