Python-based vulnerability scanner for detecting open ports, basic web security issues, and potential vulnerabilities with HTML report generation. - RAJESHWARI-456/Vulnerability-Scanner

GitLab AI Issue Bot 平台：webhook 监控 issue，Claude Code 自动处理并推送修复 - CodeFuckee/botler

Privacy-First, Self-Hostable & SSRF-Hardened MCP Server & Web Engine for AI Agents - Arbolencio/mcp-web-engine

Contribute to sanacvn/Nuclei_Template_V1 development by creating an account on GitHub.

CVE-2026-64638 adalah kerentanan Pre-Auth Reflected Cross-Site Scripting (XSS) di WordPress yang ditemukan pada tahun 2026. Kerentanan ini memungkinkan penyerang untuk menyisipkan kode JavaScript b...

PoC for CVE-2026-56197 — Windows Admin Center (WAC) command injection RCE via invokeCommand; scripted no-browser auth (csrf/JWK/RSA-OAEP login chain), --cmd/--proof/--rev reverse-shell modes - vict...

CVE-2026-43499 (GhostLock) rt_mutex stack-UAF privilege escalation research on Honor BVL-AN16 (Magic6 Pro, SM8650, kernel 6.1.128). Includes analysis docs, reverse-engineering scripts, disassembly ...

Pure-stdlib Python website vulnerability scanner (35+ checks) with a local safe lab target — zero third-party dependencies. - zqqqqqx/website-vuln-scanner

Cloud security & pentesting: AWS, Azure, GCP — IAM abuse, S3 misconfigs, SSRF metadata, secrets hunting, container security. ScoutSuite, Pacu, trufflehog. - Constan4/Ciber-Cloud

DSH 渗透测试模式：记录探索链路、资产与漏洞，并在 Web 中可视化展示。. Contribute to howmp/dsh-pentest development by creating an account on GitHub.

AV Evasion Kit is a comprehensive shellcode evasion framework using Indirect Syscalls, ETW patching, Module Stomping, .text code caves, compile-time string encryption, IPv4 obfuscation, XOR encrypt...

PoC for CVE-2026-9090 — Casdoor SAML signature bypass (CWE-347). Reproduction-only; coordinated via CERT/CC VU#780781. - Kimdir01/CVE-2026-9090-poc

PoC for CVE-2025-64512: pdfminer.six CMapDB pickle deserialization RCE via crafted PDF - oguzylmzx/CVE-2025-64512-pdfminer-PoC

Python & AI based automated vulnerability scanner and reporter. - sedat4ras/ShieldScan

AV Evasion Kit is a comprehensive shellcode evasion framework using Indirect Syscalls, ETW patching, Module Stomping, .text code caves, compile-time string encryption, IPv4 obfuscation, XOR encrypt...

Vuln（漏洞）+ Tracer（追踪器），强调 AI 对污点数据流的深度追踪、对攻击面的精准测绘能力，直击代码审计挖 CVE 的核心技术逻辑，专业感强，适合主打审计深度的技术定位。 - rockmelodies/VulnTracer

PoC for CVE-2022-3218. Contribute to mermehr/MouseServer-1.7.8.5-RCE development by creating an account on GitHub.

Contribute to kingwei123/zig0.16.0-shellcode development by creating an account on GitHub.

AI-powered vulnerability scanner extension for Burp Suite with multi-provider support (Ollama, OpenAI, Claude, Gemini) - yadavnikhil17102004/PassiveSight

A local, container-only educational demonstration of SSRF to a cloud instance metadata service (CWE-918 / OWASP A10:2021), through to credential replay, and the resolved-address control that stops ...

An explanation and PoC to exploit CVE-2026-20896 Authentication Bypass Vulnerability on Gitea. Being able to steal session tokens for valid users in the Gitea instance. - judgedbykira/CVE-2026-2089...