libhv dns_name_decode: heap overflow to code execution (independent PoC + writeup). Bug originally reported in ithewei/libhv#851. - turky-1/libhv-rce

PHP2Shell CVE-2026-109618/109619: lab-verified reproduction, root-cause analysis & visualizations (educational) - zhuyihenzheng/php2shell-repro

Ultimate Web Vulnerability Scanner by Ridox. Contribute to ahmedridox-create/ridox-scanner development by creating an account on GitHub.

This is a lab exercise on Reflected XSS using BeEF tool, In this we learned how to exploit reflected XSS in DVWA and hook a browser to BeEF for browser exploitation. - pritisurya9-ai/Reflected-XSS-...

A modular Python CLI tool for authorized web security testing, with dependency-aware scanning and JSON/HTML reports. - sahadatx/Web-Vulnerability-Scanner

SSRF-safe fetch for Node.js: blocks private, loopback and cloud-metadata addresses, checked at connect time so DNS rebinding can't get around it. - amanjhacodes55/fetch-ssrf-guard

Detection and response package for php2shell (CVE-2026-109618 / CVE-2026-109619): Suricata, Zeek, YARA, Sigma, ModSecurity rules, hunting queries, SOC triage, patch matrix. No exploit code. - Cyphe...

High-confidence, zero-false-positive software supply chain & package guard powered by go-yara - cawalch/go-yara-supplychain

Antivirus et optimiseur gratuit pour Windows (v1.0). Interface WinUI 3, ClamAV et YARA. Aucun compte, aucune publicité, aucune télémétrie. - 1donatien0/optiCOMBAT

Free, open-source vulnerability scanning for small security teams: a self-hosted scanner that runs Nuclei templates, with triage and escalation built in. - goodnightsec/gn-check

Contribute to Masriyan/Exploit-CVE-2026-110264-GitLab-CE-EE-RCE development by creating an account on GitHub.

Offline evidence checker for NetScaler DTLS CVE-2026-88772. Per-vserver configuration and firmware assessment; standalone Python; no exploit payloads. - completetech-security/netscaler-cve-2026-887...

OpenAsy DAST agent: runs Nuclei and ZAP inside your network, only against targets proven to be yours, and sends the findings to dast. - openasy/dast-agent

Adversary Emulation Framework. Contribute to ACRT-EVAL/sliver-329-cr11 development by creating an account on GitHub.

Adversary Emulation Framework. Contribute to ACRT-EVAL/sliver-329-cr10 development by creating an account on GitHub.

Standalone defensive checker project for Sharp/librsvg CVE-2026-96889. One exploit per repository; evidence-based assessment without exploit payloads. - completetech-security/sharp-rsvg-rce-check

A Python-based Web Vulnerability Scanner developed as an individual B.Tech CSE academic project. It includes security checks for web application headers, cookies, input reflection, and database err...

Root RCE via authenticated OS command injection in the TP-Link Archer AXE300 ISP Speed Test (spdt_server -> sys.fork_call). Firmware 1.0.11. CWE-78, CVSS 8.5. - vindeckyy/tp-link-archer-axe3...

Standalone defensive checker project for CVE-2026-102258: SonicWall SMA1000 (6210, 7210, 8200v): AMC stored cross-site scripting. One exploit per repository; implementation pending. - completetech-...

Standalone defensive checker project for CVE-2026-102257: SonicWall SMA1000 (6210, 7210, 8200v): AMC archive path traversal. One exploit per repository; implementation pending. - completetech-secur...