A lightweight Burp Suite extension that logs every Repeater request/response in one searchable, HTTP-history-style table - and persists it across sessions in the project file. - Blueeyes3/Burp-Repe...

Ghost CMS Content API Blind SQL Injection. Contribute to n0bitaemon/CVE-2026-26980-PoC development by creating an account on GitHub.

A lightweight malware detection system for media files using heuristic analysis, YARA rules, and machine learning. - walakeshreyas/SilentEye

Adaptive Web Vulnerability Scanner. Contribute to anmoliot/web-vuln-scanner development by creating an account on GitHub.

VSCode 语言服务插件，为泛微 Ecode 提供本地编辑与智能解析能力。. Contribute to MrBear-xzx/ecode-local development by creating an account on GitHub.

A Proof of Concept for integrating Kubernetes-based development environments into existing Active Directory classrooms. - FgmBvB/ad-classroom-containers-poc

Repository for information about 0-days exploited in-the-wild. - googleprojectzero/0days-in-the-wild

Contribute to ZeyadElkhodari/Web_Vulnerability_Scanner development by creating an account on GitHub.

A native-Windows network reconnaissance and vulnerability scanner, written from scratch in C (Winsock) - Thehan05/ReconX

免杀. Contribute to Evilearth-dotcom/Payloadloader development by creating an account on GitHub.

Community curated list of templates for the nuclei engine to find security vulnerabilities. - MrKingKishore01/Nucluei-Temperatures

Python based Advanced Vulnerability Scanner. Contribute to akhilrajput-tech/advanced-vulnerability-scanner development by creating an account on GitHub.

AI-ready vulnerability scanner for financial institutions - Emmanuel-Nimoh/SentinelScan

KHAOS is a modern C2 framework that routes agent traffic through cloud services already trusted by enterprise networks. - 28Zaaky/khaos-c2

The SSRF filter checked hostname text, but the actual destination was decided later by DNS. That gap let attacker-controlled Webhook URLs reach loopback, metadata, and private network targets. - 0x...

Penpot's remote image import let an authenticated file editor turn a normal media convenience feature into backend-origin SSRF because attacker-controlled URLs crossed into a redirect-follo...

Hacking Hotspots: Pre-Auth Remote Code Execution, Arbitrary SMS & Adjacent Attacks on 5G & 4G/LTE Routers - actuator/DEFCON-33

automated xray server setup stuff. Contribute to JustLian/denko-node-poc development by creating an account on GitHub.

PHP/MySQL CRUD coursework site, reviewed and rebuilt: fixed broken auth/CSRF/XSS, added a repository layer + PHPUnit tests - BreraDMR/sphynx-cattery-website

Proof of Concept (PoC) for a Cross-Site Scripting (XSS) vulnerability in Swagger UI via maliciously crafted YAML specifications. - hunterxsirago1/swagger-xss-poc