JFrog Artifactory 预认证全链 RCE 复现项目（CVE-2026-42018 / CVE-2026-65616 / CVE-2026-65615）：完整攻击链报告、7.146.7 Docker 复现交付物（EXP / 部署 / 基线验证 / payload 样本 / 恢复工具） - BL0odz/JFrog_CVE-2026-65615-ByGLM

Recon and vulnerability scanning tools that run in your terminal. Find subdomains, scan ports, discover hidden paths, fingerprint what's running, and check it for vulns. - clickswave/crossf...

Developed a Python-based network vulnerability scanner using Nmap and python-nmap to automatically discover live hosts, open ports, and running services on local networks. - CodeWithHusain/Home-Net...

Automated web vulnerability scanner for authorized security testing. Zero dependencies, stdlib-only Python: scope-gated SQLi/XSS/redirect/header/path checks, boolean-blind extraction, offline lab, ...

A Python Flask Web Vulnerability Scanner prototype that scans websites for missing security headers and basic input vulnerabilities, displaying results via a simple web interface. Task 1 establishe...

CCTV — HackTheBox | CVE-2024-51482 ZoneMinder SQLi, bcrypt crack, CVE-2025-60787 motionEye RCE for root - ledksv/cctv

CVE-2026-85706. Contribute to gagaltotal/CVE-2026-85706-gitlab-poc development by creating an account on GitHub.

Web Vulnerability Scanner for SQL Injection and XSS Detection - inowpss/web-vulnerability-scanner

Burp Suite extension that turns a request or response into a clean, report-ready PoC screenshot: hides browser noise headers, blurs secrets, removes lines. Repeater, Logger and Proxy. - Ginnz1337/B...

A C2 Framework (Command & Control) tool developed for red team operations and educational research. It uses Telegram as its C2 channel and encrypts data with a Base64 + XOR combination. -...

Burp Suite extension that automates SQL injection detection (error/boolean/time-based, confidence-scored), WSTG-INPVAL-05. Detection only; exploitation stays manual. - Wu-Falin/burp-sqli-detector

Autonomous agent that mines Java deserialization gadget chains from any JAR directory. Static bytecode analysis + dynamic JVM probes + dual-model adversarial auditing → weaponized PoC. Solving the ...

The Smart AI Pentesting Agent is an automated vulnerability scanner that combines traditional payload-based testing with intelligent detection mechanisms. It can identify: SQL Injection (Error-base...

Documentation on my experience writing my first working position independent shellcode for windows from scratch using x64 assembly - wizardy0ga/coding-my-first-position-independent-shellcode-for-wi...

Lightweight C2 framework in Go with encrypted communications and interactive shell - ispectr3/c2-lite

Curated collection of strict, zero-false-positive Nuclei v3 templates for bug bounty automation, infrastructure reconnaissance, and exposure hunting. - comradezephyr/nuclei-recon-templates

Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content - erberkan/CVE-2026-42536-PoC

A small Python toolkit that turns malware triage notes into clean reports, a browsable IOC dashboard, and YARA rules, with write-ups of some Windows lab samples - samdem-ai/malware-lab

Full home-lab penetration test of Rapid7's Metasploitable3 (Ubuntu 14.04) from Parrot OS. Covers recon, manual UNION SQLi, Drupalgeddon (CVE-2014-3704) RCE, SSH credential reuse, privilege ...

CVE-2026-85706 · GitLab CE/EE unauthenticated file read · research PoC with oracle mode, fd enumeration, and tiered loot targeting - plur1bu5/gitread