Reverse Shell w/ C2 Framework. Contribute to risshyssa/Reverse-Shell-w-C2-Framework development by creating an account on GitHub.

VulnScan - Flutter vulnerability scanner with Razorpay, Firestore, and admin panel - vishalpoute/vulnscan-final-year-project

Automated web vulnerability scanner with ML risk classification. - AnishDharu/WebSheid

Contribute to hardeep-sudo/Keycloak-CVE-2026-18963-Exploit development by creating an account on GitHub.

golang开发的现代网络安全技术参考手册软件，支持CLI和web两种模式。. Contribute to guaidao2/hack4all development by creating an account on GitHub.

## 工具简介 DirBuster 是一个轻量级后台路径枚举工具，用于探测目标网站可能存在的隐藏目录、敏感文件和管理后台地址。 **本工具使用 Go 语言编写,已编译为各平台可执行文件,需安装 Go 环境即可运行。** > 本工具仅供授权安全测试使用，请勿用于非法用途。 ## 适用场景 - 网站目录结构探测 - 隐藏后台入口发现 - 敏感文件泄露检测 - 授权渗透测试...

A modular Python vulnerability scanner for authorized web and TCP security testing, with safe checks, passive service detection, offline CVE candidates, and HTML, SARIF JSON, and Markdown reports. ...

模块化的 Web 漏洞靶场：丢一个模块进去，就多一道题。教学 / CTF 培训 / 自测都能用。 · A modular web vulnerability range: drop in a module, get a new challenge. For security education, CTF training, and self-assessment. - guaidao2/vu...

CyberVault Daily Real-Time Zero-Day Advisories, Nuclei YAML Templates, Exploit Verification Probes & Remediation Guides. - aghdetngf/cybervault-cve-intel

Bugku 渗透测试 3 完整解题报告（8/8 FLAG）：SSRF 任意文件读取 → PHP-FPM 未授权 FastCGI RCE → 内网横向 → SQL 注入 / CMS 漏洞 / XXE - xuanwoLQL/bugku-pentest-writeup

WAF evasion tester — 15 bypass techniques for authorized security testing - Vampsecure-Labs/vamp-waf-bypass

Contribute to Kiran051003/fit5003-xss-poc development by creating an account on GitHub.

a proof of concept for the apache log4j Java logging library (CVE-2021-44228 vulnerability) - ResoluteRacoons/log4-Java-logging-poc

Authorized SSRF testing toolkit: payload generation, out-of-band callback detection, and response analysis for security assessments you are permitted to run. - yunshen-sec/ssrf-probe

Extract every IP address, CIDR block and MAC, normalized and classified by scope - nolindnaidoo/ips-le

Metodologia di identificazione e sfruttamento di vulnerabilità RCE (Remote Code Execution) per l'ottenimento di una Reverse Shell. - porcumarcooo/THM-NoScope-RCE-Exploitation

Analisi tecnica e sfruttamento della vulnerabilità CVE-2026-42945 (Nginx Rift) per la compromissione di un server web in ambiente controllato. - porcumarcooo/THM-CVE-2026-42945-Nginx-Rift-Exploit

Analisi e sfruttamento pratico della CVE-2026-46300 (Fragnesia) per l'ottenimento di Initial Access in un ambiente di test. - porcumarcooo/THM-CVE-2026-46300-Fragnesia-Exploit

Triage scanner for CVE-2025-57819 (FreePBX Endpoint Manager unauthenticated SQLi to RCE). Detection only, no payloads. - foxcornlab/freepbx-rce-detector

Desktop reconnaissance, evidence review and focused security validation with Python, Electron, React and TypeScript. - mpol4t/Reconbot

🦎 Automated recon pipeline for bug bounty — chains subfinder, httpx, katana, gau, nuclei & more into one script. Discovers max URLs, auto-sorts params by vuln class (XSS/SQLi/SSRF/LFI/IDOR)...