🚀 A powerful, lightweight tool for detecting and analyzing DOM-based XSS vulnerabilities. - Mehran-Seifalinia/DOMinator

I find vulnerabilities in web applications before attackers do. I test web apps, APIs, and mobile apps from an attacker's point of view. I look for flaws like IDOR, XSS, SSRF, CORS issues,...

OWASP Security Training & Penetration Testing Lab - Ali-hey-0/owasp

AI Code Reviewer 是一个基于多Agent协作架构的代码审查与优化平台，通过四个专业Agent（CodeParser、SecurityAudit、PerformanceOptimizer、StyleChecker）按优先级顺序协同工作，结合长链推理能力对代码进行全方位分析——从AST结构解析、安全漏洞扫描（检测命令注入、SQL注入、硬编码凭证等10+种风险模式）、算法复杂度分析...

Contribute to Bokbong909/patch-finder development by creating an account on GitHub.

A comprehensive Security Operations Centre (SOC) incident response simulation demonstrating threat detection, triage, analysis, and mitigation of the Spring4Shell vulnerability (CVE-2022-22965). - ...

Docker-based CVE lab environments with PoC exploits. Log4Shell, Spring4Shell, Dirty Pipe, PwnKit, XZ backdoor and more. - Mkway/Critical-CVEs

CRAReady SBOM test fixture — Java/Maven app with Log4Shell (CVE-2021-44228), Spring4Shell, Text4Shell, and other critical CVEs - neilc1964techned/craready-test-java-vulns

Full Kubernetes container escape demo on AWS EKS — Spring4Shell RCE to cluster takeover — with web dashboard, automated containment via Cortex XDR playbook + AWS Lambda, and security posture radar....

🛡️ Analyze CVE-2025-5419 to exploit an uninitialized read vulnerability in V8 for arbitrary read/write access within the sandbox environment. - Riquelme54322/CVE-2025-5419

🛠️ Exploit CVE-2025-2304 in Camaleon CMS easily with this Python script for privilege escalation, tested on version 2.9.0. - MAEN1-prog/CVE-2025-2304

Contribute to Lutfifakee-Project/CVE-2026-41651 development by creating an account on GitHub.

Burp Suite extension for automated detection of Log4j RCE, Apache Shiro, Fastjson RCE, and Next.js RCE vulnerabilities with passive and active scanning support. Features include context menu integr...

🛠️ Exploit Shiro deserialization vulnerabilities with this comprehensive tool, ensuring dynamic gadget generation and stealthy memory execution. - Shedo11/ShiroExploit

☁ OneDrive public directory listing, based on onedrive-vercel-index, the secondary development Onedrive project fixes security vulnerabilities and improves performance, and provides Docker environm...

🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently. - pedrocruz2202/mongobleed-scanner

🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data. - sakthivel10q/CVE-2025-14847

POC_CVE-2026-45185 for nuclei-templates. Contribute to MJ-bin/POC_CVE-2026-45185 development by creating an account on GitHub.

CVE-2026-42945 - NGINX Rift Toolkit. Contribute to gagaltotal/CVE-2026-42945-NGINX-Rift-Toolkit development by creating an account on GitHub.