Chrome extension for real-time detection of potential DOM-based XSS vulnerabilities and unsafe data flows. - raghavsec/Real-DOM-XSS-Monitor

A hands-on cybersecurity lab simulating a SSRF attack against an AWS EC2 instance, inspired by the 2019 Capital One breach - Aireck2/cyber-project-01

A PoC/exploit written in python for the vulnerability CVE-2026-3359 situated within Form Maker by 10Web. - itsthalisman/cve-2026-3359-exp

TongWebExploit 是一款面向 TongWeb 反序列化漏洞场景的图形化检测与利用工具，支持漏洞探测、命令回显、EL 表达式执行、内存马注入和批量检测。 - CurlySean/TongWebExploit

Security assessment of DVWA: SQL Injection and XSS across Low/Medium/High tiers, with a professional PDF report and a custom Python automation script. - pablenr/dvwa-security-assessment

Sigma YARA Rule to KQL Rule Converter Tool. Contribute to vincevi1375/sigma2kql development by creating an account on GitHub.

Proof of Concept exploit for CVE-2026-26899 in OpenWrt luci-app-https-dns-proxy - iwallplace/CVE-2026-46368-OpenWrt-Exploit

Web application penetration test on OWASP Juice Shop — 20 vulnerabilities found (5 Critical) including SQLi, XSS, IDOR, XXE & more. Full professional report with PoC exploits. - amenifayech...

Unauthenticated Local File Inclusion. Contribute to Polosss/By-Poloss..-..CVE-2026-7515-PoC development by creating an account on GitHub.

A auto pentest tools goes with some worderful other tools中文:这款自动化渗透测试工具还附带了一些非常出色的辅助工具。 - hunterhkkk/Redteam_Atuo_pentest_tools_formal

Skill + Hook 双层约束系统，让 Claude Code / AI Agent 在渗透测试场景下既能放手测试，又不会脱库、删库、留后门claudecode skills pentest-guards-skills - aalhea/pentest-guards-skills

Sphynx GraphQL Fuzzing — Burp Suite Extension. Contribute to knowbe4/sphynx-graphql-fuzzing development by creating an account on GitHub.

Burp Suite Professional Full Version Download | v2024.1.3 Pre-Activated Installer with Patch & Keygen | Cybersecurity Toolkit. - BaronResurrect/BurpSuite-Professional-2024.1.3-Full

CVE-2025-21479 PoC for ZFlip5 with Knox in the way!(˶˃ ᵕ ˂˶) - ma4the/omae-wa-cheese-da

unix_collector is a Live Response collection script for Incident Response on UNIX-like systems using native binaries. Supports AIX, Android, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD ...

Root-Level RCE via OS Command Injection in Ivanti Sentry - error-inside/CVE-2026-10520

Fortinet FortiSandbox 4.4.0-4.4.8 - OS Command Injection via tracer-behavior Endpoint - error-inside/CVE-2026-39808

SpecOps is a Burp Suite extension that ingests an OpenAPI or Swagger spec and instantly builds a workbench to test every documented endpoint. - rawatprince/SpecOps

Forensic metadata extraction tool for images (JPG, PNG, TIFF) and documents (PDF, DOCX) — generates structured JSON and CSV investigation reports. - michspenz/MetaData-Analyzer

A Python vulnerability scanner built for my cybersecurity portfolio. - Klee815/vulnerability-scanner

Threat intelligence and detection content for TernDoor, a China-nexus (UAT-9244 / FamousSparrow / Tropic Trooper) modular backdoor of the CrowDoor lineage. Full technical report, IOCs, and YARA / S...