Burp Suite MCP server with 80+ tools for authorized web security testing - nguyenthdat/burp-mcp

魔方财务文件上传与任意模板加载组合漏洞修复. Contribute to chuzhongyun/zjmf-file-upload-vulnerability-fix development by creating an account on GitHub.

Automated web vulnerability scanner evaluation using authorised lab targets and accuracy-based security testing metrics. - emmanuel77-design/Web-detection-toolkit

Uac Bypass Path Mapper 2026 — clear documentation, release channel, and getting-started workflows. - divinecheetahshow68/uac-bypass-path-mapper-utility-2026

A Flask-based cloud storage public bucket vulnerability scanner. - shaikaneesa19/-CloudStorageVulnerabilityScanner

An automated, local-first dependency vulnerability scanner, auto-updater, and structural refactoring (AST) companion tool designed to safely remediate security advisories within the local developme...

Burp Suite 敏感信息实时提取插件 - JsStrike By NANA. Contribute to C4nXu3/JsStrike development by creating an account on GitHub.

Contribute to QM4RS/CVE-2026-0075 development by creating an account on GitHub.

s. Contribute to Knz-source/CVE-2026-23111-POC-noddlenpottato development by creating an account on GitHub.

Contribute to Leonideath/nuclei-templates-evolution development by creating an account on GitHub.

MCP environment-variable blocklist bypass leads to unauthenticated RCE in Flowise 3.1.1 - leoelsolh/CVE-2026-69263

An advanced web vulnerability scanner with WAF bypass, AI assistance, and hacker-style terminal. - danial-eghbalizade/cyber-ghost-scanner

Pluck CMS site-wide CSRF (fail-open Referer check) → RCE via double-extension upload. PT-2026-68036, CWE-352/434, CVSS 8.0. Advisory + PoC by @IlhomjonR. - IlhomjonR/PluckCMS-CSRF-RCE

Pentest-styled report of a 4-finding DVWA vulnerability chain — stored XSS to session theft, SQL injection to credential extraction, command injection to RCE, and persistent web shell - Mastertacti...

Security vulnerability disclosure for ENS Metadata Service (SSRF & DoS) - Julik000/ens-metadata-security-disclosure

Emoji_ShopXSS2SHELL is an intentionally vulnerable web application lab demonstrating a Stored XSS-to-RCE attack chain through insecure administrative functionality. Built for authorized cybersecuri...

Easily push Burp findings into your Pentest-Tools.com workspace. - pentesttoolscom/pentest-tools-integration

模拟乙方安全服务流程完成企业Web应用渗透测试与风险评估项目。遵循正规渗透测试授权流程，完成信息收集、漏洞探测、人工漏洞复现、风险分级、输出整改方案，最终生成标准化安全评估报告。 - wangyu-wycc/web-penetration-risk-assessment

A modular Python tool for Static Malware Analysis: PE Header Parsing, Shannon Entropy Calculation (Packer/Crypter detection), Suspicious Win32 API Identification, and YARA Rule Engine Integration. ...

A multi-phase offensive security CTF range covering SQLi, Stored XSS, CSRF, IDOR, SSRF, Cache Deception, and Cache Poisoning using Python Flask, SQLite, Docker, and Nginx. - haroonatieeq352/csz-ctf...