reflected xss. Contribute to O-jingjing/xss-wargame development by creating an account on GitHub.

Contribute to mohwahyudi/poc-CVE-2026-64638- development by creating an account on GitHub.

CVE-2026-60004 — Gitea Pre-Auth RCE via diffpatch hook injection - gagaltotal/CVE-2026-60004-poc-gitea

**Aether（玄翎）** 是一款基于大语言模型的**自主渗透测试智能体**。它突破传统自动化扫描工具依赖预定义规则库的局限，通过融合 **P-E-R 多智能体协作框架**、**因果图推理引擎**与 **RAG 知识增强**，模拟人类安全专家的思维链路，实现从信息收集到漏洞利用的全流程自主决策与执行。 - JiuZero/AetherAgent

Python vulnerability scanner — multithreaded port scanning, banner-based outdated version detection, and weak-configuration checks (HTTP headers, anonymous FTP, legacy TLS, Telnet), with CLI and Fl...

Macrium Reflect Plus Pulse. Contribute to NorthBeetleScissors/macrium-reflect-plus-pulse development by creating an account on GitHub.

Lightweight web vulnerability scanner targeting OWASP Top 10 - rudransh-v/web_vulnscan_project

A simple web vulnerability scanner with minimal false positives - LeonardoParchao/UltraDAST

CVE-2026-27912 (ResetNightmare) — Linux/impacket port of Semperis Community's Invoke-ResetNightmare PoC - mihat2/ResetNightmare-impacket

An editing interface and evasion tool featuring a collection of advanced obfuscation techniques to bypass AV/EDR detection of PowerShell scripts. Simply enter your payload and modify and create it ...

WordPress Pre-Auth RCE Exploit + Scanner + WAF Bypass | CVE-2026-63030 + CVE-2026-60137 | Go + Python + Metasploit modules + Docker lab - M4xSec/wp2shell-Exploit-Waf-Bypass

RaceTrackLab 是一个用于学习和演示高并发环境下竞态条件（Race Condition）漏洞的靶场平台。通过模拟真实的并发场景，帮助开发者理解并发安全的重要性。 - GitHubNull/raceTrackLab

Python-based OWASP-inspired web vulnerability scanner with automated detection, reporting, and vulnerable testing labs. - RevantVishwakarma/wvscan

Contribute to SheezaAlam/Malware-Detection-using-YARA-Vulnerability-Research development by creating an account on GitHub.

0-click XSS (CWE-79) in Mozilla Pocket Android v8.33.0.0 via unsanitized $(document.body).html(content) in articleview-mobile.js. Background service triggers execution without user interaction. Jav...

🛡️ Machine Learning-Based XSS Honeypot | 🤖 Hybrid ML + Keyword/Regex Detection | 🔍 Reflected & Stored XSS Detection | 📊 Attack Monitoring & Threat Analysis | 🔐 Cybersecurity Researc...

Anaguma is a tool capable of exploiting code cave in binaries in order to inject shellcode. - Plunder283/anaguma

A modern, console-based web penetration testing toolkit with a TUI. Features an HTTP/HTTPS proxy, active/passive vulnerability scanner, Repeater, Intruder, Spider, and more. Free & open-sou...