Repo for custom burp extensions. Contribute to mic-cyberkid/burp-extensions-suite development by creating an account on GitHub.

A secure and responsive job application landing page built with Next.js, featuring reCAPTCHA v2, CSRF protection, CSP headers, server-side validation, and secure CV upload with JSON storage in appl...

C-Dev-Sandbox is my engineering journal for learning C from the ground up—starting with fundamentals and progressing into low-level concepts like memory management, pointers, file streams, and bina...

ZDT-D, Bypassing Internet blocks in Russia. Contribute to GAME-OVER-op/ZDT-D development by creating an account on GitHub.

YouCan.shop CVSS 9.8 SSO Bypass: 52,706 stores vulnerable via token leak in 302 redirect. Store ID → token1 → admin sessionid → full dashboard + Orders/PII access. Zero-auth takeover. PoC chain: cu...

WAF-enhanced Caddy web server that inspects HTTP traffic, blocks common attacks (XSS, SQLi, RFI), and forwards structured security events to a SIEM for real-time monitoring, threat correlation, das...

Modify AD-Integrated DNS Zone Dynamic Update settings via LDAP. Bypasses DNS Server RPC by directly editing the dNSProperty attribute. Requires WriteProperty on dNSProperty or higher privileges on ...

Web application security assessment demonstrating SOC analyst skills. Conducted comprehensive vulnerability testing on DVWA using Burp Suite, identifying & documenting critical security fla...

Burp Suite extension for detecting PortSwigger Top 10 Web Hacking Techniques (2025) — 8 modules, 250+ CVE-backed payloads - ShubhamDubeyy/Aurex

Waymap is a fast and optimized web vulnerability scanner built for penetration testers. It helps in identifying vulnerabilities by testing against various payloads. - TrixSec/waymap

Modular Scanner — Burp Suite extension with 11 scan modules (SQLi, XSS, SSRF, SSTI, CmdI, Deserialization, GraphQL, Param Mining, Endpoint Discovery, Subdomain Collection, Security Headers). Montoy...

CVE-2026-26744. Contribute to lorenzobruno7/CVE-2026-26744 development by creating an account on GitHub.

A simple utility for bypassing amfid signature verification - zqxwce/amfidont

🛠️ Bypass Cloudflare's anti-bot measures using CloudScraper with proxy integration for smoother and more effective web scraping. - BolekL/Cloudscraper-with-proxies

Export Burp Reported Findings and Activities to JSON - EDMPL/Burp2Json

OmniStrike — Burp Suite extension with 12 scan modules (SQLi, XSS, SSRF, SSTI, CmdI, XXE, NoSQLi, Deserialization, GraphQL, Endpoint Discovery, Subdomain Collection, Security Headers). Montoya API....

Educational HTTP brute force framework for security research and penetration testing training in controlled lab environments. Features smart credential testing, auto-throttling, and CSRF handling. ...

Splunk SOC investigation of Joomla webshell and C2 attack using BOTS v1 dataset - GeerthanaCyberBytes/splunk-botsv1-joomla-attack-analysis

Projeto relacionado ao desafio de servidor HTTP em GO com Proteção CSRF da rocketseat - poulhenry/gobank-api

CVE-2026-5252 CVE POC ivanti. Contribute to aydin5245/CVE-2026-5252-CVE-POC-ivanti development by creating an account on GitHub.

Contribute to theemperorspath/CVE-2026-2441-PoC development by creating an account on GitHub.