YouCan.shop CVSS 9.8 SSO Bypass: 52,706 stores vulnerable via token leak in 302 redirect. Store ID → token1 → admin sessionid → full dashboard + Orders/PII access. Zero-auth takeover. PoC chain: cu...

WAF-enhanced Caddy web server that inspects HTTP traffic, blocks common attacks (XSS, SQLi, RFI), and forwards structured security events to a SIEM for real-time monitoring, threat correlation, das...

Modify AD-Integrated DNS Zone Dynamic Update settings via LDAP. Bypasses DNS Server RPC by directly editing the dNSProperty attribute. Requires WriteProperty on dNSProperty or higher privileges on ...

Web application security assessment demonstrating SOC analyst skills. Conducted comprehensive vulnerability testing on DVWA using Burp Suite, identifying & documenting critical security fla...

Burp Suite extension for detecting PortSwigger Top 10 Web Hacking Techniques (2025) — 8 modules, 250+ CVE-backed payloads - ShubhamDubeyy/Aurex

Waymap is a fast and optimized web vulnerability scanner built for penetration testers. It helps in identifying vulnerabilities by testing against various payloads. - TrixSec/waymap

Modular Scanner — Burp Suite extension with 11 scan modules (SQLi, XSS, SSRF, SSTI, CmdI, Deserialization, GraphQL, Param Mining, Endpoint Discovery, Subdomain Collection, Security Headers). Montoy...

CVE-2026-26744. Contribute to lorenzobruno7/CVE-2026-26744 development by creating an account on GitHub.

A simple utility for bypassing amfid signature verification - zqxwce/amfidont

🛠️ Bypass Cloudflare's anti-bot measures using CloudScraper with proxy integration for smoother and more effective web scraping. - BolekL/Cloudscraper-with-proxies

Export Burp Reported Findings and Activities to JSON - EDMPL/Burp2Json

OmniStrike — Burp Suite extension with 12 scan modules (SQLi, XSS, SSRF, SSTI, CmdI, XXE, NoSQLi, Deserialization, GraphQL, Endpoint Discovery, Subdomain Collection, Security Headers). Montoya API....

Educational HTTP brute force framework for security research and penetration testing training in controlled lab environments. Features smart credential testing, auto-throttling, and CSRF handling. ...

Splunk SOC investigation of Joomla webshell and C2 attack using BOTS v1 dataset - GeerthanaCyberBytes/splunk-botsv1-joomla-attack-analysis

Projeto relacionado ao desafio de servidor HTTP em GO com Proteção CSRF da rocketseat - poulhenry/gobank-api

CVE-2026-5252 CVE POC ivanti. Contribute to aydin5245/CVE-2026-5252-CVE-POC-ivanti development by creating an account on GitHub.

Contribute to theemperorspath/CVE-2026-2441-PoC development by creating an account on GitHub.

Professional-grade async vulnerability assessment framework for bug bounty & pentesting. Covers XSS, SQLi, SSRF, RCE, SSTI, GraphQL, Cloud Misconfig & 30+ CVE templates. WAF evasion...

şuan yok. Contribute to aydin5245/cve-2026-0006 development by creating an account on GitHub.

Hands-on web application security lab demonstrating SQL injection, blind SQLi, XSS, and CSRF exploitation and mitigation in a manually configured DVWA environment. - barrytd/security-lab-portfolio