oPnael DNS-Based Cross-Site Scripting (XSS) & Session Hijacking - bugresearch/CVE-2026-50980

Joomla security scanner for detecting malware, webshells, rogue admins, and exploit artifacts from SP Page Builder and JCE vulnerabilities. - zkrana/joomla-security-scanner

Web Vulnerability Scanner is a project designed to identify common web application security issues. The tool scans target websites for vulnerabilities such as SQL Injection, Cross-Site Scripting (X...

Staged Loader for red team purposes. Contribute to sexyiam/AceLdr development by creating an account on GitHub.

CVE-2026-42271 - LiteLLM AI Gateway MCP Command Injection RCE - PoC & Analysis | CVSS 8.8 | AMN SECURITY - amnsecurity/CVE-2026-42271-LiteLLM-RCE

☢️ ReactorWatch v3.2.1 — Nuclear Reactor Core Monitoring System Pentest | CVE-2025-55182 (React2Shell) Unauthenticated RCE → SQLite Exfil → MD5 Crack → SSH Pivot → CDP Root Escalation | CVSS 10.0 |...

Minimal, dependency-free MCP server for AI security agents — CVE lookup (OSV.dev), Shodan host recon, and local Nuclei scan orchestration over the Model Context Protocol. - bharat3645/voraxx-mcp-se...

CVE-2026-45659 - Microsoft SharePoint Deserialization RCE - PoC & Analysis | CVSS 8.8 | AMN SECURITY - amnsecurity/CVE-2026-45659-SharePoint-RCE

CVE-2026-8451 - Citrix NetScaler SAML Memory Overread (CitrixBleed) - PoC & Analysis | CVSS 8.8 | AMN SECURITY - amnsecurity/CVE-2026-8451-CitrixBleed

Proof of Concept for Reflected XSS in Lucee CFML (CVE-2026-29519) - L4V4D0/CVE-2026-29519-Lucee-Reflected-XSS

Web Application Security Testing of DVWA in an Authorized Laboratory Environment - Shreyasi-Techie/dvwa-web-application-security-assessment

一个fscan项目解析网站工具. Contribute to gmeier909/fscan_parse development by creating an account on GitHub.

A Proof of Concept (PoC) exploit for CVE-2026-46331 - aexdyhaxor/CVE-2026-46331

SploitScan - CVE-PoC Monitoring Data (Auto-updated by GitHub Actions) - w4n95/SploitScanData

Web vulnerability scanner in Python — 26 test modules, headless-browser (JS/SPA) crawling, REST/JSON API fuzzing, 5 report formats, OWASP Top 10 mapping, enterprise auth, REST API server, and 140 t...

SSRF-safe scan/egress authorization + tamper-evident audit for Go — the guardrail that stops outbound tools (scanners, crawlers, fetchers) from reaching internal infra or running unauthorized/dange...

西电网安生产实习-漏洞复现实战笔记. Contribute to well-of-little/DVWA-Pentest-Report development by creating an account on GitHub.

Enterprise web vulnerability scanner — 17 test modules, 5 report formats, YAML config, OWASP mapping, REST API, webhooks, and 122 tests. Built for authorised pentesting and CI/CD pipelines. - S1YOL...

PoC for CVE-2026-56423: MISP deleteSelection broken access control (CWE-862, contributor hard-deletes other orgs' Event Reports/Sharing Groups, CVSS 8.8) - BiiTts/CVE-2026-56423-MISP-delete...

An educational, intentionally vulnerable Laravel security lab for practicing web penetration testing and secure code review (SQLi, Stored XSS, Path Traversal, CSRF, IDOR). Graduation project for DE...