Contribute to GamerNamless/AI-bypass-Manager development by creating an account on GitHub.

A curated collection of hands-on web application penetration testing CTF labs covering SQL Injection, XSS, SSRF, Deserialization, SSTI, File Upload to RCE, XXE, Command Injection, LFI/RFI, CSRF, RE...

NEXUS — Unified bug bounty automation framework. 6 phases (DISCOVER→SCALE), 82 features, multi-engine dorking, KEV/EPSS threat intel, AI agent with multi-key failover, Discord/Telegram C2. Detectio...

XSS PoC. Contribute to smul1/XSS development by creating an account on GitHub.

A Python-based Simple Vulnerability Scanner that detects open ports, identifies potential security risks, and generates basic vulnerability assessment reports using Streamlit and socket programming...

Unauthenticated privilege escalation in SimpleForm WordPress plugin <= 3.10.0. Registers an administrator account without authentication - joshuavanderpoll/CVE-2026-104748

扫 GitHub Actions 工作流，找出可被利用的配置 —— 供应链攻击的主要入口. Contribute to feely0208/dsh-ci-guard development by creating an account on GitHub.

Contribute to bericontraster/CVE-2026-85097-Briskforge-RCE development by creating an account on GitHub.

V8 inlined Array.prototype.sort elements-kind confusion - PoC + addrof (N-day research) - jamezx32/CVE-2026-85046

DSH 插件：管理员权限的获取 / 复用 / 释放 —— 按需通过 UAC 启动常驻提权助手（空闲自退、跨进程复用），并把提权后的内存访问能力提供给其它 DSH 插件 - bingine/dsh-get-admin

Antivirus engine written in Rust for Windows: a rule engine of its own, a KMDF minifilter driver, realtime and memory scanning, quarantine vault, service, CLI and GUI. No cloud, no machine learning...

A Python-based vulnerability scanner to identify open ports and understand basic security risks. - shivaani05-AS/simple-vulnerability-scanner-

A Python-based vulnerability scanner to identify open ports and understand basic security risks. - shivaani05-AS/simple-vulnerability-scanner

Web vulnerability scanner built from scratch in Python (headers, cookies, XSS, SQLi, outdated JS, exposed files), benchmarked against Nikto and OWASP ZAP. - adityaak1512/web-vuln-scanner

YARA detection rule testing using harmless simulated samples, with documented results and screenshots. - aditiesrivastava/yara-safe-threat-detection

1:1 realtime chat with a tiny shared buddy (Expo + Spring WebFlux) - ottuck/puny-chat

Contribute to ajhaigh/struts2-rce development by creating an account on GitHub.

An interactive analysis lens for suspicious .eml files - iamjoshgilman/franking

Wazuh PoC chaining CVE-2026-74034 file read and CVE-2026-74041 command execution; fixed in 4.14.8. Python standard library only. - roninreilly/wazuh-unauth-chain

Native Burp Suite (Montoya API) port of wafw00f — fingerprints WAF/CDN solutions passively and via active probing, reporting them as Burp audit issues. Detection signatures originate from wafw00f b...