CVE-2026-2576 — Business Directory Plugin SQLi PoC (Local Setup). Unauthenticated Time-Based Blind SQL Injection Business Directory Plugin for WordPress ≤ 6.4.21 - SowatKheang/CVE_2026_2576_PoC

MCP server for reading C2PA Content Credentials from media using the CAI Rust SDK. - contentauth/c2pa-mcp

An attacker can execute arbitrary JavaScript in the victim's browser, potentially leading to session hijacking or privilege escalation. - Tharooon/CVE-2026-29971

Labs práticos de pentest com Kali Linux, Metasploitable 2 e DVWA — cobrindo Nmap, SQL Injection e XSS em ambiente controlado. - lehidavet/pentest-labs-kali-metasploitable-dvwa

PoC exploit for CVE-2025-34282 - ThingsBoard SSRF via SVG Image Upload - mathitam/thingsboard-ssrf-cve-2025-34282

This repo is my public journey — every solve, every struggle, every technique. I document everything because there was a time when easy felt impossible. We fall 9 times and rise 10. - akn-cybersec/...

【Java计算机毕业设计分享】基于区块链的禽类溯源系统设计与实现，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - kevinyang11101/oyXDEGIvst

典型的 Java/Spring Boot 前后端分离博客系统安全审计实战项目。包含深度代码审计报告、高危漏洞剖析（XSS、越权、并发脏写）及修复方案。 - ysi6701/Security_Audit_Report_Blog

pentesting tool to bypass captcha Steam, Gmail, Instagram, Facebook, Twitter, Snapchat, Outlook, Netflix, Adobe Bot Automation - SeseydOw/Captcha-Bypass-Tool

Convert any webpage to clean Markdown for AI agents. Bypasses Cloudflare, strips boilerplate. Optional Obsidian vault integration. - jcenters/distill

Go + Gin 多门店供应链管理系统，支持采购、库存、门店记账、钉钉通知和完整 RBAC 权限控制 - Kevin-Jii/tower-go

Security assertions + AI test recording for Playwright - Orla-Labs/kovar

StatWoX is a high-octane serverless survey hybrid. Hardened by the CoderWa Protocol : boasting centralized Edge middleware, SSRF prevention, CIDR subnet matching, and atomic DB transactions. Featur...

🐟 An open-source idle fishing pet game built with Flutter - 开源钓鱼挂机养成游戏 - gallifreyCar/gallifreys-fish-farm

Jaga is an ultra-lightweight, zero-dependency security layer for HTML templates, providing context-aware XSS protection between user input and the DOM. - dgknbtl/jaga

🛡️ Web-Based Vulnerability Scanner built with Flask for detecting XSS, SQL Injection, CSRF, API flaws & open ports with real-time monitoring and downloadable reports. - himanshuvats123/vuln...

Vinted Scraper Python 2026 (Bypass Cloudflare & Datadome) - KinderBW/vinted-scraper-python

CVE-2026-29905. Contribute to Stalin-143/CVE-2026-29905 development by creating an account on GitHub.

基于 Claude Code 的自动化渗透测试 Agent，目标是达到中高级网络安全专家水平。. Contribute to hanc00l/nemo-agent development by creating an account on GitHub.