CVE-2026-27771 #exploit
CVE-2026-27771 - Gitea/Forgejo Container Registry Auth Bypass Exploit PoC - Pull private container images without authentication
https://github.com/portbuster1337/CVE-2026-27771
CVE-2026-27771 - Gitea/Forgejo Container Registry Auth Bypass Exploit PoC - Pull private container images without authentication
https://github.com/portbuster1337/CVE-2026-27771
GitHub
GitHub - portbuster1337/CVE-2026-27771: CVE-2026-27771 - Gitea/Forgejo Container Registry Auth Bypass Exploit PoC - Pull private…
CVE-2026-27771 - Gitea/Forgejo Container Registry Auth Bypass Exploit PoC - Pull private container images without authentication - portbuster1337/CVE-2026-27771
CVE-2026-999999 #exploit #scanner
A critical Server-Side Template Injection (SSTI) vulnerability exists in the X-Trading Portal v1.4.2 dashboard metadata rendering engine. The flaw is due to improper sanitization of user-controll...
https://github.com/24520597-blip/CVE-2026-999999
A critical Server-Side Template Injection (SSTI) vulnerability exists in the X-Trading Portal v1.4.2 dashboard metadata rendering engine. The flaw is due to improper sanitization of user-controll...
https://github.com/24520597-blip/CVE-2026-999999
GitHub
GitHub - 24520597-blip/CVE-2026-999999: A critical Server-Side Template Injection (SSTI) vulnerability exists in the X-Trading…
A critical Server-Side Template Injection (SSTI) vulnerability exists in the X-Trading Portal v1.4.2 dashboard metadata rendering engine. The flaw is due to improper sanitization of user-controll...
synthetic-cti-advisories #pentest
Synthetic cyber threat advisories and indicators for controlled defensive exercises.
https://github.com/24520597-blip/synthetic-cti-advisories
Synthetic cyber threat advisories and indicators for controlled defensive exercises.
https://github.com/24520597-blip/synthetic-cti-advisories
GitHub
GitHub - 24520597-blip/synthetic-cti-advisories: Synthetic cyber threat advisories and indicators for controlled defensive exercises.
Synthetic cyber threat advisories and indicators for controlled defensive exercises. - 24520597-blip/synthetic-cti-advisories
CVE-2026-33137 #exploit
XWiki Platform - CVE-2026-33137 PoC - Unauthenticated XAR Import via REST /wikis/{wikiName}
https://github.com/portbuster1337/CVE-2026-33137
XWiki Platform - CVE-2026-33137 PoC - Unauthenticated XAR Import via REST /wikis/{wikiName}
https://github.com/portbuster1337/CVE-2026-33137
GitHub
GitHub - portbuster1337/CVE-2026-33137: XWiki Platform - CVE-2026-33137 PoC - Unauthenticated XAR Import via REST /wikis/{wikiName}
XWiki Platform - CVE-2026-33137 PoC - Unauthenticated XAR Import via REST /wikis/{wikiName} - portbuster1337/CVE-2026-33137
CVE-2026-33712 #exploit
CVE-2026-33712 - Typebot <= 3.15.2 Unauthenticated SSRF via isolated-vm sandbox fetch
https://github.com/portbuster1337/CVE-2026-33712
CVE-2026-33712 - Typebot <= 3.15.2 Unauthenticated SSRF via isolated-vm sandbox fetch
https://github.com/portbuster1337/CVE-2026-33712
GitHub
GitHub - portbuster1337/CVE-2026-33712: CVE-2026-33712 - Typebot <= 3.15.2 Unauthenticated SSRF via isolated-vm sandbox fetch
CVE-2026-33712 - Typebot <= 3.15.2 Unauthenticated SSRF via isolated-vm sandbox fetch - portbuster1337/CVE-2026-33712
Exploit-PoC #exploit #scanner
A curated collection of Proof-of-Concept exploit scripts, vulnerability research, and security tooling developed for verified CVEs and CWEs.
https://github.com/ZeroTrustWraith/Exploit-PoC
A curated collection of Proof-of-Concept exploit scripts, vulnerability research, and security tooling developed for verified CVEs and CWEs.
https://github.com/ZeroTrustWraith/Exploit-PoC
GitHub
GitHub - ZeroTrustWraith/Exploit-PoC: A curated collection of Proof-of-Concept exploit scripts, vulnerability research, and security…
A curated collection of Proof-of-Concept exploit scripts, vulnerability research, and security tooling developed for verified CVEs and CWEs. - ZeroTrustWraith/Exploit-PoC
chrome-extension-security-analysis #exploit
Static-first Chrome extension security analyzer — manifest risk scoring, source→sink flow detection, evidence-based PoC generation, and interactive exploit verification dashboard
https://github.com/rstevens70/chrome-extension-security-analysis
Static-first Chrome extension security analyzer — manifest risk scoring, source→sink flow detection, evidence-based PoC generation, and interactive exploit verification dashboard
https://github.com/rstevens70/chrome-extension-security-analysis
GitHub
GitHub - rstevens70/chrome-extension-security-analysis: Static-first Chrome extension security analyzer — manifest risk scoring…
Static-first Chrome extension security analyzer — manifest risk scoring, source→sink flow detection, evidence-based PoC generation, and interactive exploit verification dashboard - rstevens70/chrom...
storm-framework #exploit #osint #recon #scanner
A tool for discovering security vulnerabilities from initial reconnaissance to exploitation, built on a REPL-based modular architecture, optimized for fast module execution, and supporting mobile p...
https://github.com/StormWorld0/storm-framework
A tool for discovering security vulnerabilities from initial reconnaissance to exploitation, built on a REPL-based modular architecture, optimized for fast module execution, and supporting mobile p...
https://github.com/StormWorld0/storm-framework
GitHub
GitHub - StormWorld0/storm-framework: A offensive security framework for reconnaissance, vulnerability assessment, and exploitation.
A offensive security framework for reconnaissance, vulnerability assessment, and exploitation. - StormWorld0/storm-framework
pentest-tool #pentest
pentest-tool security / pentest utility.
https://github.com/Mansimovv/pentest-tool
pentest-tool security / pentest utility.
https://github.com/Mansimovv/pentest-tool
GitHub
GitHub - Mansimovv/pentest-tool
Contribute to Mansimovv/pentest-tool development by creating an account on GitHub.
cyber-portfolio #bugbounty
Cybersecurity portfolio demonstrating ethical hacking, penetration testing, bug bounty research, and Python-based security tools
https://github.com/rishicybersec/cyber-portfolio
Cybersecurity portfolio demonstrating ethical hacking, penetration testing, bug bounty research, and Python-based security tools
https://github.com/rishicybersec/cyber-portfolio
GitHub
rishicybersec/cyber-portfolio
Cybersecurity portfolio demonstrating ethical hacking, penetration testing, bug bounty research, and Python-based security tools - rishicybersec/cyber-portfolio
SENTINEL-X #bugbounty #osint #recon #scanner
SentinelX is a cybersecurity and bug bounty platform designed to streamline reconnaissance, vulnerability assessment, and network analysis for security researchers and developers. Built with a CLI...
https://github.com/JKELVIN-tech/SENTINEL-X
SentinelX is a cybersecurity and bug bounty platform designed to streamline reconnaissance, vulnerability assessment, and network analysis for security researchers and developers. Built with a CLI...
https://github.com/JKELVIN-tech/SENTINEL-X
GitHub
GitHub - JKELVIN-tech/SENTINEL-X: SentinelX is a cybersecurity and bug bounty platform designed to streamline reconnaissance,…
SentinelX is a cybersecurity and bug bounty platform designed to streamline reconnaissance, vulnerability assessment, and network analysis for security researchers and developers. Built with a CLI...
yoke #osint #recon
Domain intelligence and OSINT tool. Analyze any domain for DNS, WHOIS, SSL, security headers, tech stack, performance, breaches, and more.
https://github.com/yokedotlol/yoke
Domain intelligence and OSINT tool. Analyze any domain for DNS, WHOIS, SSL, security headers, tech stack, performance, breaches, and more.
https://github.com/yokedotlol/yoke
GitHub
GitHub - yokedotlol/yoke: Domain intelligence and OSINT tool. Analyze any domain for DNS, WHOIS, SSL, security headers, tech stack…
Domain intelligence and OSINT tool. Analyze any domain for DNS, WHOIS, SSL, security headers, tech stack, performance, breaches, and more. - yokedotlol/yoke
grove-intelligence #osint
58 IC-grade analytic tools as an MCP server -- ACH, I&W, entity graphs, OSINT, classification, knowledge graphs. Zero dependencies beyond Python 3.12+.
https://github.com/microwaveovens-yay/grove-intelligence
58 IC-grade analytic tools as an MCP server -- ACH, I&W, entity graphs, OSINT, classification, knowledge graphs. Zero dependencies beyond Python 3.12+.
https://github.com/microwaveovens-yay/grove-intelligence
GitHub
GitHub - microwaveovens-yay/grove-intelligence: 58 IC-grade analytic tools as an MCP server -- ACH, I&W, entity graphs, OSINT,…
58 IC-grade analytic tools as an MCP server -- ACH, I&W, entity graphs, OSINT, classification, knowledge graphs. Zero dependencies beyond Python 3.12+. - microwaveovens-yay/grove-intelligence
bos-code-scanning-kit #ad #scanner
Run secret/code scanners and posture audits, then upload a unified SARIF log to GitHub Advanced Security.
https://github.com/blackoutsecure/bos-code-scanning-kit
Run secret/code scanners and posture audits, then upload a unified SARIF log to GitHub Advanced Security.
https://github.com/blackoutsecure/bos-code-scanning-kit
GitHub
GitHub - blackoutsecure/bos-code-scanning-kit: Run secret/code scanners and posture audits, then upload a unified SARIF log to…
Run secret/code scanners and posture audits, then upload a unified SARIF log to GitHub Advanced Security. - blackoutsecure/bos-code-scanning-kit
Palmary #scanner
AI-powered code vulnerability scanner — paste a GitHub repo, get a full security report with severity scores, attack chain graph, and AI-generated fixes in under 60 seconds.
https://github.com/yat1j/Palmary
AI-powered code vulnerability scanner — paste a GitHub repo, get a full security report with severity scores, attack chain graph, and AI-generated fixes in under 60 seconds.
https://github.com/yat1j/Palmary
GitHub
GitHub - yat1j/Palmary: AI-powered code vulnerability scanner — paste a GitHub repo, get a full security report with severity scores…
AI-powered code vulnerability scanner — paste a GitHub repo, get a full security report with severity scores, attack chain graph, and AI-generated fixes in under 60 seconds. - yat1j/Palmary
tor-browser #ad #web
tor browser download official onion dark web privacy security anonymous vpn unblock windows 11 android apk latest version 2026 free setup guide fix
https://github.com/tor-browsers/tor-browser
tor browser download official onion dark web privacy security anonymous vpn unblock windows 11 android apk latest version 2026 free setup guide fix
https://github.com/tor-browsers/tor-browser
GitHub
GitHub - tor-browsers/tor-browser: tor browser download official onion dark web privacy security anonymous vpn unblock windows…
tor browser download official onion dark web privacy security anonymous vpn unblock windows 11 android apk latest version 2026 free setup guide fix - tor-browsers/tor-browser
Unknown-Hacking-Tool-Full-Source-Code #exploit
Exploring cybersecurity, ethical hacking, reverse engineering, and remote administration concepts using the “Unknown Hack”
https://github.com/OnlineUnknowns/Unknown-Hacking-Tool-Full-Source-Code
Exploring cybersecurity, ethical hacking, reverse engineering, and remote administration concepts using the “Unknown Hack”
https://github.com/OnlineUnknowns/Unknown-Hacking-Tool-Full-Source-Code
GitHub
GitHub - OnlineUnknowns/Unknown-Hacking-Tool-Full-Source-Code: Exploring cybersecurity, ethical hacking, reverse engineering, and…
Exploring cybersecurity, ethical hacking, reverse engineering, and remote administration concepts using the “Unknown Hack” - OnlineUnknowns/Unknown-Hacking-Tool-Full-Source-Code
gogs-rce #exploit
Gogs RCE via argument injection in git rebase (CWE-88) — Python PoC. No CVE yet.
https://github.com/portbuster1337/gogs-rce
Gogs RCE via argument injection in git rebase (CWE-88) — Python PoC. No CVE yet.
https://github.com/portbuster1337/gogs-rce
GitHub
GitHub - portbuster1337/gogs-rce: Gogs RCE via argument injection in git rebase (CWE-88) — Python PoC. No CVE yet.
Gogs RCE via argument injection in git rebase (CWE-88) — Python PoC. No CVE yet. - portbuster1337/gogs-rce
cosmicsting-cve-2024-34102-exploit #exploit #scanner
Complete CosmicSting (CVE-2024-34102) exploit suite for Magento/Adobe Commerce XXE vulnerability
https://github.com/russellwork2021-lgtm/cosmicsting-cve-2024-34102-exploit
Complete CosmicSting (CVE-2024-34102) exploit suite for Magento/Adobe Commerce XXE vulnerability
https://github.com/russellwork2021-lgtm/cosmicsting-cve-2024-34102-exploit
GitHub
GitHub - russellwork2021-lgtm/cosmicsting-cve-2024-34102-exploit: Complete CosmicSting (CVE-2024-34102) exploit suite for Magento/Adobe…
Complete CosmicSting (CVE-2024-34102) exploit suite for Magento/Adobe Commerce XXE vulnerability - russellwork2021-lgtm/cosmicsting-cve-2024-34102-exploit
struts-uploader-vulnerability #exploit #scanner
Research of exploit options for CVE-2024-53667 and their remediation
https://github.com/baburkin/struts-uploader-vulnerability
Research of exploit options for CVE-2024-53667 and their remediation
https://github.com/baburkin/struts-uploader-vulnerability
GitHub
GitHub - baburkin/struts-uploader-vulnerability: Research of exploit options for CVE-2024-53667 and their remediation
Research of exploit options for CVE-2024-53667 and their remediation - baburkin/struts-uploader-vulnerability