TechDocs RCE PoC - Backstage Security Research. Contribute to Jhounx/backstage-techdocs-poc development by creating an account on GitHub.

JavaSecLab is a Java and Spring Boot security lab for testing vulnerabilities like SQL Injection, XSS, SSRF, RCE, and authentication flaws. It demonstrates Core Java, OOP, Spring Security, MySQL, R...

Vulnfy is a lightweight, cross-platform dependency and container vulnerability scanner written in Python. It automatically detects project configuration/lock files across multiple languages and e...

Network vulnerability scanner and data protection - erick-kenedy/Erickson-project-

一款 Web3 防钓鱼谷歌浏览器插件，用于在 Google 搜索结果中自动标记区块链项目官方域名并预警非官方赞助商广告。 - taipeitalk/Web3-Guard

Website Vulnerability Scanner using Flask, Python and MongoDB - 230081601042-debug/website-vulnerability-scanner

StudyBoard is a lightweight guestbook-style web application created to demonstrate a Stored Cross-Site Scripting (XSS) vulnerability and its mitigation. Users can submit their name and a study tip...

DEEPSLOP — PS5 WebKit exploit kit (RCE dashboard): PROBE mode, self-porting offset scanner, LOW_MEM, beacon logging, REPL loader - badrcoderman/deepslop

Caido plugin that ranks HTTP responses by anomaly using a Burp-inspired categorical frequency model. - aleister1102/anomaly-ranker-caido

AI-powered Web Vulnerability Scanner. Contribute to Roxxhard/SentinelScan development by creating an account on GitHub.

BEAR-C2 is an adversary simulation and emulation framework built around real world TTPs inspired by Russian, Chinese, North Korean, and Iranian APT groups. - S3N4T0R-0X0/BEAR-C2

Burp Extension to add additional functionality for pentesting websocket based applications - snyk/socketsleuth

Ultimate Vulnerability Scanner - Web + Cloud + Infrastructure 100+ Vulnerability Types • 1100+ Payloads • Full Takeover Capable - g0d150ne/God-eye

AI-powered PHP vulnerability scanner and static security analyzer for detecting SQL injection, XSS, RCE, malware, backdoors, secrets, and insecure code. - BangPiyus/php-ai-security-scanner

Exploit for pgAdmin4 Remote Code Execution (RCE) vulnerability affecting versions 8.10 to 9.1. - g0d150ne/CVE-2025-2945

XSS2Shell ULTIMATE v3.0 is a powerful exploitation tool that chains Cross-Site Scripting (XSS) vulnerabilities in WordPress to achieve Remote Code Execution (RCE). This tool exploits CVE-2026-64638...

WP2Shell is a powerful and modular exploit framework that combines two critical WordPress vulnerabilities (CVE-2026-63030 and CVE-2026-60137) to achieve complete compromise of a target site without...

独立 APK：CVE-2026-43499 GhostLock 提权 + Shizuku shell 身份执行 - oopnv70-lab/ghostlock-apk

DFIR and Malware Analysis Lab - FlareVM, REMnux, Ghidra, CAPA, YARA, Volatility 3 - ronankongala/dfir-malware-lab

This repository is for Indicators of Compromise (IOCs) from Zscaler ThreatLabz public reports - ThreatLabz/iocs

Single-node Wazuh 4.12.0 stack deployed on the management segment of a multi-VLAN home SOC lab, with agents enrolled on a Windows domain controller and workstation, plus a custom MITRE ATT&...