PoC for RefluXFS. Contribute to 0xSec1/CVE-2026-64600-RefluXFS-PoC development by creating an account on GitHub.

A Python-based vulnerability scanner that checks websites for common security issues and generates an HTML report. - abinaya-tech26/vulnerability-scanner

Comprehensive walkthroughs and solutions for Hacker101 CTF challenges. Educational writeups covering web security vulnerabilities including XSS, SQL injection, authentication bypass, and more. - Cy...

Simple wrapper that runs Cellpose segmentation model in a convenient way. It can run nuclei, nuclei + cytoplasm or nuclei + 2 x cytoplasm [combined] segmentation over grayscale images. - CellProfil...

PoC for CVE-2026-27912 - Windows Kerberos Elevation of Privilege (ResetNightmare). Unauthorized password reset via Kerberos flaw. For security research only. - oxstussz-eng/Kerberos-CVE-2026-27912

CVE-2026-54433 Roundcube plain-text email stored XSS PoC - aramosf/CVE-2026-54433

Browser capability for DeepSeek Harness: headed Edge/Playwright provider, SSRF-safe navigation, a11y-ref clicking, permission gate with auto-remember, gated evaluate - xylt369/dsh-browser

夜航 · works —— 双非计算机学生的网安作品仓公开镜像（Bash → Linux → 网络 → Web → 漏洞复现 → writeup） - pionxe/works

A cybersecurity lab demonstration illustrating how an insecure file upload function in a web application can be exploited using **Burp Suite to achieve Remote Code Execution (RCE) and exfiltrate se...

Contribute to SANR01/CVE-2021-41773-Exploit-Lab development by creating an account on GitHub.

A Python-based network vulnerability scanner that discovers active devices, scans TCP ports, detects services and banners, performs rule-based risk analysis, and generates security reports. - aloks...

A lightweight Node.js vulnerability and security configuration scanner. - Pexel-sibi/JARVIS-vulnerability-scanner

Intentionally vulnerable single-page dashboard demonstrating es-chromium DOM-XSS taint tracking - 21 flows across 8 sources and 18 sinks, each reachable from one URL. Demo target only. - EyalSec/vu...

es-chromium: a Chromium build that tracks attacker-controlled data through V8 and Blink and reports DOM-XSS as a flow, not a guess. The browser agent behind EyalSec. - EyalSec/es-chromium

CVE-2026-8452 PreAuth RCE. Contribute to watchtowrlabs/watchTowr-vs-Citrix-Netscaler-PreAuth-RCE-CVE-2026-8452 development by creating an account on GitHub.

Reglas YARA para detección de malware, desarrolladas a partir de análisis de muestras reales. - raulsineiro/malware-yara-rules

Proof of Concept (PoC) for CVE-2026-64638, a reflected XSS in WordPress Core < 7.0.3. - zahidec0de/CVE-2026-12345-poc

POC tool for ResetNightmare (CVE-2026-27912). Contribute to Semperis-Community/ResetNightmare development by creating an account on GitHub.

Burp Suite extension: loopback MCP/HTTP API so agents can drive live Burp (scope, history, send, scanner, collaborator). - SquidSec/SquidSec_BurpAIBridge

Burp Suite Community Edition extension providing a powerful HTTP traffic search feature. Search captured requests and responses using keywords or regex, with filters, match highlighting, snippets, ...

Malicious PDF files recently considered one of the most dangerous threats to the system security. The flexible code-bearing vector of the PDF format enables to attacker to carry out malicious code ...