Web漏洞复现练习笔记. Contribute to Hazyn-Cloud/Vulhub-Lab development by creating an account on GitHub.

All-in-One Centralized Container & Source Code Vulnerability Scanner with SBOM, Multi-Format Reporting, and Multi-User RBAC Management. - hacksudo/keelr

Read-only macOS security posture and vulnerability scanner with evidence-preserving reports - hideouts-io/MacScope

C++20 Zero-Heap Industrial IoT Bare-Metal Framework for Espressif Silicon (ESP32, S2, S3, C2, C3, C6, H2, P4) - dhimasardinata/AetherIoT

ROS# 路径遍历漏洞(CVE-2026-41551). Contribute to selecthch/CVE-2026-41551 development by creating an account on GitHub.

Exploit for CVE-2026-18963 by BlackHatExploitation - BlackHatExploitation/Exploit-For-CVE-2026-18963

Sd0p-V3.5 是款面向 PHP 反序列化漏洞的 CTF 自动化 Payload 生成工具。提供 PyQt6 图形界面，集成 PHP 代码解析、POP 链推导、字符串逃逸构造、内置类利用、PHAR 反序列化、HTTP 投递与 POP 链可视化等能力。 - LingBale/Sd0p-CTF-DeserializationTool

面向安全学习、漏洞研究与软件开发的本地 AI Agent 工作台. Contribute to MilkSU-Official/milksu development by creating an account on GitHub.

Burp Suite extension that automates BOLA/BFLA/BOPLA testing across roles, users, and endpoints with a verdict matrix. - JoyGhoshs/AuthMatrix-Reloaded

This repo is poc of cve-2026-18963. Please use it on legal products (lab, local,...). - prot0tw/Keycloak_CVE-2026-18963_PoC

TP-Link Archer BE800 V1 — VPN Key Injection RCE. Contribute to Slagzz/CVE-2026-16348 development by creating an account on GitHub.

Local web vulnerability scanner and security testing lab built with Python. - varshininarla57/VulnLab

Burp Suite extension that runs the WPT pentest checlist against a live authenticated session and export to ReportSystem - sweshinfosec/QuickChop

Contribute to GMJayy/wp-cve-poc development by creating an account on GitHub.

a basic xss & sqli detector (educational pruoposes only!!!) - Light-is-Yagami/sqli-xss-basic-scanner-vulnerability

CVE-2026-15469 — Hard-coded RSA-512 mesh group private key in TP-Link Deco XE75/XE5300/WE10800 (CWE-321). Advisory, analysis & PoC methodology (EN/KO). - tony102741/CVE-2026-15469

Burp Suite extension to passively extract and inspect TLS, HTTP and QUIC fingerprints from proxy traffic. Focused on analysis only; no fingerprint spoofing capabilities. - 0x676e67/burp-fp-track

DSH 红队/渗透测试模式 bundle：授权 engagement 记录、证据链、跨会话历史与 Web 可视化（二次开发自 howmp/dsh-pentest） - shine-233/dsh-redteam

A source-agnostic VS Code Agent Skill for turning feature details from AzDo, Productboard, Confluence, raw text, tickets, meeting notes, documents, or mixed sources into framework-native specificat...