A hands-on web security project exploring vulnerability chaining, attack paths, and exploitation of common web application weaknesses. - alia-77/Chained-Web-Vulnerabilities

CVE-2026-19874. Contribute to alicealys/mgo3-rce development by creating an account on GitHub.

Generic Shellcode Loader which makes use of AES encryption. - 0xStalic/AES-Shellcode-Loader

一款能自动搜寻漏洞和资产的web扫描器. Contribute to ZYith/AutoWebSec development by creating an account on GitHub.

A simple Python-based web vulnerability scanner. Contribute to Pratibha517/WebVulnerabilityScanner development by creating an account on GitHub.

Burp Suite extension for testing WebAuthn/FIDO2 passkey ceremonies: decode, edit, and attack CBOR/COSE payloads. - anvilsecure/passkey-editor

Multi-cloud metadata service enumerator via SSRF (AWS/Azure/GCP) with IMDSv2 support and MITRE ATT&CK mapping - skzun/CloudCrawler

Sovereign CORS reverse proxy for browser git smart-HTTP — lets a wasm git client reach non-CORS remotes (GitHub, Forgejo). Pure-Go, CGO=0, SSRF-guarded, auth-passthrough. - go-browserhttp/gitcorsproxy

Demostración práctica y bitácora técnica de explotación de BlueKeep (CVE-2019-0708) en RDP usando Nmap y Metasploit, documentando la resolución de errores en el entorno virtual. - SebasPV27/Explota...

Modern web UI for Sliver C2 framework with real binary integration - glassmorphism design, server/client management, command execution - mscupcakegkill-hue/sliver-c2-ui

PoC for CVE-2026-43914: Vaultwarden <1.35.4 email-2FA brute-force bypass password oracle. Stdlib-only Python. - Boreas37/CVE-2026-43914-PoC

Active Directory pentest methodology for Claude Code: skills, agents and slash commands for internal AD red-team work (Kerberoasting, ADCS ESC1-17, DCSync, ACL abuse, NTLM relay, delegation), with ...

TP-Link Archer BE800 V1 — Parental Control LAN RCE - Slagzz/CVE-2026-9254

⭐️ Nessus Professional | Vulnerability Scanner Pro v10.2 | Setup Installer | Keygen License | Full Version Activation | Latest Build Updated | Security Assessment Tool | Risk Management Software | ...

Contribute to CBrady-Projects/vulnerability-scanner development by creating an account on GitHub.

Turns a vulnerability scanner's daily findings into hands-on attack-and-defense labs, automatically, one lab per CVE. A learner exploits a real vulnerable container, finds their own attack...

A narrow, defensive vulnerability scanner CLI — plaintext protocols, anonymous FTP, missing HTTP security headers, known-CVE version matching. Mandatory authorization gate; owned/authorized targets...

Mini vulnerability scanner project. Contribute to shubhamchatterjee-coder/vulnerability-scanner development by creating an account on GitHub.

Next-generation Java deserialization detection & exploitation for Burp Suite - santic161/Deserialization-Toolkit

The email marketing platform Acelle Mail versions <= 4.0.24 is vulnerable to a full unauthenticated Remote Code Execution through a multi-step exploitation chain - Yucaerin/Acelle-Mail-4.0.2...

Turns a vulnerability scanner's daily findings into hands-on attack-and-defense labs, automatically, one lab per CVE. A learner exploits a real vulnerable container, finds their own attack...