CLI web vulnerability scanner: headers, TLS, cookies, redirects, forms, reflected XSS. HTML/JSON reports. - Kassidi-Iliasse/threatharbor

Collection of remote shellcode Loaders using Early Bird APC injection, direct/indirect syscalls, ntdll and low level utilities, undetected by Windows Defender and BitDefender - Hue-Jhan/Syscall-Ear...

Collection of remote shellcode Loaders using APCs, direct/indirect syscalls, ntdll and low level utilities, undetected by Windows Defender and BitDefender - Hue-Jhan/Syscall-Apc-Injection-Trojans

Argus Sentinel: a defensive, non-destructive web application vulnerability scanner (OWASP Top 10 2025). - santiagosantofimio/webapp-vuln-scanner

Mission Critical Vulnerability Scanner (MCVS) Python Action. Create Python code without high and critical vulnerabilities. - schubergphilis/mcvs-python-action

This report details a digital forensic investigation of a fileless malware attack initiated by a compromised USB device. The analysis reconstructs a multi-stage execution chain (VBS, BAT, and Pytho...

现代化的websocket渗透测试工具，本身即支持多种websocket漏洞扫描与fuzz方法，同时高级功能支持websocket协议代理为http协议，由coolmoon和guaidao2开发。 - guaidao2/crackws

CVE-2026-61500 Rejetto HFS predictable PRNG session forgery to RCE PoC and Docker lab - aramosf/CVE-2026-61500

Enterprise Malware Intelligence, Dynamic Analysis & Digital Forensics platform - sample/case management, sandbox detonation, YARA/ATT&CK/IOC analysis, threat intel, reporting - Awai...

Browser extension (MV3) for in-browser SQL injection, reflected XSS, and security-header probing — companion to aegis - sourabhbeni/aegis-lens

FirmAudit2 — AI Agent firmware vulnerability audit pipeline, from unpacking to a CNVD-ready delivery bundle. | 从解包到 CNVD 交付总包，一条固件漏洞审计流水线：Agent 负责挖，平台负责把关 —— 八段引导、四道结果门、命令级复现，全程可回放、可校验、可交付 - JiuZer...

Burp Suite Style Mobile Browser Extension. Contribute to sudokage-sh/burp-mobile development by creating an account on GitHub.

CVE-2026-41089 LongLogon: pre-auth CLDAP (UDP/389) stack buffer overflow crasher for unpatched Windows Server 2025 Netlogon (lsass 0xc0000409). Stdlib-only Python PoC + lab write-up. - 1posix/CVE-2...

devops lab exp 5 jenkins. Contribute to vadthyavathcharanteja/exp-5 development by creating an account on GitHub.

A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing unauthenticated attackers to gain root-level WHM access by injecting CRLF sequen...

Exploit Index provides a searchable, version-wise database of High and Critical CVEs across major enterprise products, with Proof of Concept (PoC) exploit links and CISA Known Exploited Vulnerabili...

CVE-2020-14008 - ManageEngine Applications Manager RCE - raflesiait/CVE-2020-14008

Contribute to langz337/CVE-2026-63030 development by creating an account on GitHub.

Burp Suite extension for generating CSRF Proof-of-Concepts for educational and authorized security testing. - KLZer0/CSRF-PoC-Generator

CVE-2026-97163 PoC: Joomla UP (lomart.fr) unauthenticated GitHub mini-install / remote action deployment (≤6.0.29). Detects plugin version, probes com_ajax install triggers. Fix: UP 6.1.0 / 5.2.1. ...

CVE-2026-97161 PoC: Joomla UP (lomart.fr) unauthenticated path traversal / arbitrary file read via ajax-view (≤6.0.29). Fingerprints plugin, probes configuration.php. Fix: UP 6.1.0 / 5.2.1. https:/...