VampSecure Labs — Subdomain Takeover Vulnerability Scanner - Vampsecure-Labs/vamp-subdomain-takeover

An authorized and sanitized AD CS ESC8 NTLM relay lab with evidence, impact analysis, detection, and mitigations. - madjjjxh/adcs-esc8-ntlm-relay-lab

CVE-2026-60004 Pre-Auth RCE Exploit — Gitea <= 1.27.0 diffpatch git hook injection (CVSS 9.8) - imbas007/CVE-2026-60004-POC

Modular web vulnerability scanner — SQLi, NoSQLi, auto DB-dump, WAF bypass - OCV-Researcher/reaper-scanner

Read-only security vulnerability scanner powered by the Cursor SDK - Speediing/cursor-security-agent

Python POC, Exploit for Handlebars.js AST Injection RCE, Handlebars.js versions 4.0.0 through 4.7.8 are affected. CVSS score: 9.8 Critical. - c0gnit00/CVE-2026-33937

A proof-of-concept for CVE-2026-39987. Contribute to Wind010/CVE-2026-39987_PoC development by creating an account on GitHub.

多语言文档分析引擎，完全在内存中运行，具有并行 YARA 扫描、PDF 分析和威胁检测功能。 / Multi-language document analysis engine operating entirely in memory with parallel YARA scanning, PDF analysis, and threat detection capabilities. /...

Mission Critical Vulnerability Scanner (MCVS) Golang Action Taskfile REMOTE_URL_REF updater. Action that updates the REMOTE_URL_REF in a Taskfile through Pull Requests to prevent that one will forg...

A simple Python-based vulnerability scanner that detects open ports on a target system to identify potential security risks. - shaiktafziltaj861-crypto/scanner.py

Advanced XSS detection suite with context-aware payload generation, custom HTML/JS parsing, intelligent fuzzing, fast crawling, and DOM/reflected XSS scanning. Includes WAF detection/evasion, param...

Restored from anonymous99-Rise. Contribute to TreasureBoy520/cve-2026-poc-collection development by creating an account on GitHub.

基于天狐渗透工具箱二次开发的一体化信息收集工具. Contribute to jiege56/RedTeam-Recon development by creating an account on GitHub.

A Python-based Web Application Vulnerability Scanner that automates the detection of common web security vulnerabilities, including SQL Injection, Cross-Site Scripting (XSS), missing security heade...

hvnc implant with c2 for super educational puroses xo - ekomsSavior/hvnc_implant

A hands-on Red Team laboratory demonstrating the deployment of a Sliver Command and Control (C2) infrastructure with an Nginx redirector, Docker-based isolated environment, HTTPS communication, and...

A lightweight Python vulnerability scanner for learning penetration testing basics. Scans open TCP ports, grabs banners to flag outdated software, detects weak configs (Telnet, FTP, exposed RDP), a...

vulnerability-scanner_v1 . Contribute to Mithunvm92/vulnerability-scanner_v1 development by creating an account on GitHub.

CVE-2026-12940 — Langflow OSS <=1.10.1 unauthenticated RCE via MCP stdio environment-variable injection (SHELLOPTS/PS4). Author PoC + source analysis + lab. - BiiTts/CVE-2026-12940-Langflow-...

CVE-2026-52887 — NocoBase SQL injection -> PostgreSQL-superuser RCE (myInAppChannels:list filter, CVSS 10.0). Author PoC + source analysis + docker lab. - BiiTts/CVE-2026-52887-NocoBase-SQLi-RCE