POC FastAPI librariy application in a Jenkins pipeline to illustrate secured CI/CD, rollback and run-time persistence. - kekcoke/pykins

Tenant isolation, replay protection, signature verification, path traversal, SSRF, redaction, and CI supply-chain boundary tests. - messaging-intel-test/security-boundary-tests

Contribute to 0xSt4rk007/ssrf development by creating an account on GitHub.

A Burp Suite extension for viewing JWTs that actually gives you the space to view them. - zw00sh/burp-jwt-viewer

CVE-2025-55182 — Next.js Flight Deserialization RCE exploit with interactive shell, single-command execution and multi-payload reverse shell chain. For authorized penetration testing only. - dotnet...

Responsible PoC for a missing-authorization-check comment-triggered RCE finding in bazel-contrib/rules_cuda integration-tests.yaml (reported to Google Bug Hunters OSS VRP) - 2423gen-stack/rules-cud...

PortSwigger is the UK-based security research company behind Burp Suite, the industry-standard web and API security testing platform used by penetration testers and enterprise AppSec teams worldwid...

ReconPulse - A lightweight vulnerability scanner written in Python. Functional subdomain enumeration (passive + brute force), multi-threaded port scanning, and verification through PocSuite 3 POC. ...

CVE-2022-22947 Exploit script. Contribute to Arrnitage/CVE-2022-22947_exp development by creating an account on GitHub.

A fast, reactive graphical interface (GUI) for managing Sliver C2 operations, powered by Wails and Svelte. - Gubarz/siren

WAF evasion testing toolkit. Grammar + encoding mutation, dialect-specific bypasses, evolutionary search, per-WAF gene-bank persistence. Rust. - santhreal/wafrift

C2 Control Center — deploy, manage, and destroy C2 frameworks (Mythic, Sliver) from one CLI - CR1MS0N-Operator/c4

AI-assisted self-healing CI/CD platform POC with FastAPI services, Docker, Kubernetes, GitHub Actions, LangGraph RCA agents, verification, and human-reviewed remediation PRs. - narayanareddy11/ai-s...

A zero-config Python AST linter that flags unsafe loading of an ML model/artifact (torch.load without weights_only, pickle/joblib/dill.load, np.load allow_pickle, keras load_model, yaml.load) - arb...

根据漏洞公告自动生成Poc. Contribute to 1diot9/AutoPoc development by creating an account on GitHub.

Network vulnerability scanner and traffic monitor with web dashboard. - prince-dholakiya/network-security-suite

PoC Exploit for blind SSRF in XML-RPC Wordpress. Contribute to 4chech/CVE-2022-3590 development by creating an account on GitHub.

0ldSQL_MySQL_RCE_exploit.py (ver. 1.0) (CVE-2016-6662) MySQL Remote Root Code Execution / Privesc PoC Exploit For testing purposes only. Do no harm. - Ashrafdev/MySQL-Remote-Root-Code-Execution

Python-based antivirus and endpoint security prototype using SHA-256 signatures, YARA rules, real-time monitoring, quarantine, logging and security reporting. - vijaykumarsistu789-stack/basic-pytho...

SSRF靶场，覆盖9大分类（基础SSRF、协议级SSRF、IP地址过滤绕过、URL解析器混淆、302重定向SSRF、DNS Rebinding、Blind SSRF、云元数据攻击、真是业务场景），真实业务场景覆盖12个真实的业务场景（webhook测试器、URL预览、图片代理/CDN、PDF生成器、API网关/代理、RSS阅读器、从URL导入文件、短链接展开器、健康检查监控、OAuth SS...

Java反序列化靶场，涵盖CB、CC、Dubbo、Fastjson、Hessian、Jndi、Log4j、Shiro、Weblogic等Java反序列化场景 - TaoLjx/JavaDeserialization