Writeups from PortSwigger Web Security Academy labs exploiting UNION-based SQL injection (Oracle) and DOM-based XSS via document.write, with root cause analysis and fixes. - marz-w/sql-injection-xs...

AOMEI Cyber Backup Advanced Security Bypass 2026 Update - vsd2030/aomei-cyber-backup-legacy-repo

Hive C2 Framework. Contribute to cyber-green/hive development by creating an account on GitHub.

一个自用的cve收集爬虫 主要爬取www.cvelogic.com的昨天高危cve漏洞 输出hcml和md文件 因为作者打开hcml用浏览器翻译 - QWQERw/cve_reports-cve-

CVE patch: CWE-502 XMLDecoder RCE in miglayout-core 5.3 (NV-001261) - akashgit/nv-001261-miglayout-core

Practical Burp Suite script collection with ready-to-use automation, extension samples, and security testing utilities gathered in one repository. - walkerevan87/burp-executor-scripts-2026

Abyssal is a high-performance Telnet vulnerability scanner for CVE-2026-24061, delivering root shells on vulnerable systems with false-positive detection. - stoerti2/Abyssal

Extend Burp Suite functionality with a curated collection of scripts, custom extensions, and practical guides for security researchers. - Tianna94/burpsuite-executor-scripts

A BurpSuite extension that applys sequences of encode/decode operations before pasting clipboard text to a request editor - rhburt/Paste-Encoder

First-principle security research — HWBP tamper bypass, TOCTOU quarantine race, AMSI/ETW evasion. OCCUPATION FORCE CALLSIGN GSW PTY. LTD. - rainfantry/22sd-research-findings

Contribute to stenlan/xss-poc development by creating an account on GitHub.

A webiste vulnerability scanner, the front end is built in NextJS Typescript, and the backend is built in Python (FastAPI). Authentication is also incorporated with Auth0. - joshua95-web/phoenix-vu...

Use Sysdig Secure as a plug-in vulnerability scanner in the Harbor registry - sysdiglabs/harbor-scanner-sysdig-secure

Exploitability PoC for CVE-2026-9558 (SSTI Mautic Theme) - covepseng/cve-2026-9558-poc

Detection rules, Sigma rules, YARA rules, KQL queries, and security analytics. - noelmulkeycyber/detection-engineering

APICollector is a comprehensive, open-source Burp Suite extension designed to supercharge your API security testing workflow. It bridges the gap between API development tools (Insomnia, Postman, Op...

CVE-2026-54390 — JTL Shop Smarty SSTI RCE | Pre-Auth Template Injection via fetch('string:' . ) | 5.2.0-5.7.1 - shinthink/CVE-2026-54390

PhantomLink - A Python-based Command & Control (C2) framework and Remote Administration Tool (RAT) designed for educational research, red teaming, and security auditing. - LethimCookMyBro/Link_all

权限提升与业务逻辑漏洞安全专项 - 水平越权IDOR/支付逻辑负金额漏洞检测与修复（网络安全实践作业） - 2007-ygp/auth-bizlogic-security

An autonomous RLM agent that reverses disclosed CVEs from their public patches into local-lab PoCs and Nuclei detection templates. - qazbnm456/cve-reverser