Zero-dependency multi-SNS cross-posting SDK (X, Mastodon, Bluesky, Misskey, Threads) with DNS-rebinding-safe SSRF protection for federated instances and AES-256-GCM credential envelopes. - takao-de...

HTTP request payload inspector for SQLi, XSS, SSTI, and path traversal - Logihertz-Systems-OPC-Pvt-Ltd/lh-payload-guard

Firefox containers for security testing and bug bounty hunting, with isolated sessions, per-container proxies, User-Agent overrides, and Burp Suite integration through dedicated proxy listeners. - ...

UploadHunt is a Burp Suite extension designed to help security researchers and bug bounty hunters identify potential file-upload vulnerabilities. Using a rule-based hypothesis engine. - tobiasGuta/...

Security advisory and PoC: unauthenticated file upload, file read and RCE in the Survey Project (NSurvey) Filemanager ASP.NET connector - einsteinstein/surveyproject-filemanager-advisory

Contribute to sheema-ruzaik/CVE_2021-41773_ApachePathTraversal_RCE development by creating an account on GitHub.

Contribute to ZSH402/openhands-sdk-unauthenticated-rce development by creating an account on GitHub.

Local-first pentest finding extractor and report engine for Nmap, Nuclei, ZAP, Burp, Nessus, and Trivy (Markdown, HTML, JSON, CSV). - gencay-e/scanfuse

Dependency-free PoC for SaltStack CVE-2020-11651/11652 that runs on modern Python (pyzmq + msgpack, no salt library) - codenamepetrel/salt-cve-2020-11651-poc

Analyzes HTTP access logs (Combined/JSON/CloudFront/Cloudflare) to detect directory brute-forcing, vulnerability scanner fingerprints (Nuclei/Nikto/SQLMap), credential stuffing bursts, and anomalou...

Educational web vulnerability scanner built with Python and Flask - vixi-max/VulnScan

natsuk1 kernel R/W exploit research — CVE-2026-112611 CoreGraphics PDF shading OOB write PoC - murk-sus/natsuk1

给 AI 项目装一句默认的安全咒语：代码后门、Skill 越权、文档隐私、文件夹权限，四域本地体检。 - xscanzm/ai-security-guard

CVE-2023-34468: Apache NiFi 1.21.0 Remote Code Execution (ExecuteProcess Variant) - Security Research & Analysis by Mohammed Moshii - mohammed-moshii/CVE-2023-34468-Apache-NiFi-RCE

Interactive 3D cybersecurity, CVE exploit & patched defense architecture simulator — step-by-step packet visualizer, hex inspector & live threat lab. - MinoCodi/securityexplorer

Free sample detection rules and advisories from Medina Telemetry Systems - Medina-Telemetry-Systems/detections-public

Native Windows RE workbench: PE scan, findings triage, reverse/debug/diff shells, and an optional lab C2 channel. Remake of 0xwarl0ck/ExploitPeek. - digitizables/ExploitPeek

Analysis of a git post-checkout hook dropper delivered via a fake freelance client: social-engineering lure, static triage, infrastructure intelligence, host assessment, and controlled detonation -...

A Burp Suite extension that adds a dedicated PHP code editor to Repeater, featuring syntax highlighting, automatic PHP detection, and seamless editing of PHP payloads within HTTP requests, includin...