Vite is a frontend tooling framework for javascript. Vite exposes content of non-allowed files using ?inline&import or ?raw?import. Only apps explicitly exposing the Vite dev server to the ...

Wazuh 8.4 CVE-2025-24016. Contribute to guinea-offensive-security/Wazuh-RCE development by creating an account on GitHub.

管理用户自建的各类软件工具（出发点是管理渗透测试类工具，但可以推广到各类软件工具和在线工具），并对其使用体验进行优化。本工具集主要对命令行程序进行了大量优化，对工具检索、环境配置、工具自定义、扫描结果管理、进程管理方面的用户体验也进行了大量探索。 - laferce/cybertoolsuite

This repository contains a proof-of-concept exploit for CVE-2025-48827, a critical authentication bypass vulnerability affecting vBulletin 5.0.0–5.7.5 and 6.0.0–6.0.3 when running on PHP 8.1 or lat...

用于渗透测试的WebFuzz扫描工具. Contribute to Nbccccc/FinderFuzz development by creating an account on GitHub.

NoAuth 是一款用于动态生成可能绕过 Java 鉴权的 payload 并进行 fuzz 测试的工具，主要用于在代码审计和绕鉴权场景中节省时间 - steveopen1/NoAuth_V2

CVE-2025-29927 PoC | Auth Bypass Exploit | Python Tool using httpx | Middleware Vulnerability | Ethical Hacking Toolkit - mickhacking/Thank-u-Next

CVE-2025-29927 PoC | Auth Bypass Exploit | Python Tool using httpx | Middleware Vulnerability | Ethical Hacking Toolkit - mickhacking/Thank-u-Next

CVE-2025-5777 (CitrixBleed 2) - [Citrix NetScaler ADC] [Citrix Gateway] - SleepNotF0und/CVE-2025-5777

CVE-2025-27591 is a known privilege escalation vulnerability in the Below service (version < v0.9.0) - dollarboysushil/Linux-Privilege-Escalation-CVE-2025-27591

Stored XSS in Sirv WordPress Plugin v7.5.5 – CVE-2025-XXXX - Bineshmadharapu29/CVE-2025-XXXX-Sirv-Stored-XSS

渗透测试报告自动化生成. Contribute to chxl1999/pentest_report_generator development by creating an account on GitHub.

Mazesec团队自制靶机题解仓库，专注于分享HackMyVM平台的自制靶机PDF题解，涵盖渗透测试实战与安全研究，供学习交流使用。 - hyhforevertop/Mazesec-writeups

PoC for CVE-2025-25257, a critical unauthenticated SQL injection in FortiWeb. Exploits SQLi via the Authorization header to write a webshell and gain RCE. No login required. Fully automated. - 0xgh...

AutoVAPT is an open-source GUI tool for automated Vulnerability Assessment and Penetration Testing. It integrates OWASP ZAP, CVE/CVSS enrichment, AI-based analysis, and custom recon tools—built for...