REDTIDE — an asynchronous web application security scanner for red-team engagements and penetration testing. Combines active vulnerability detection (XSS, SQLi, SSTI, SSRF, LFI, and more), passive ...

NetSecurePro IA Lab - Meta+1 SSRF and Anti-TOCTOU Socket Pinning Validator - milyes/netsecurepro-ia-lab

Desktop malware scanner for files and URLs — check before you run or download. Local engines (ClamAV, YARA-X, Defender), hash reputation, and an ML model. Python, PySide6/QML. - TyomPapiyan/PreScan

A PoC exploit for CVE-2026-24061 - GNU InetUtils telnetd Argument Injection Authentication Bypass - iLokaas/CVE-2026-24061-payload

Contribute to rmhowe425/POC-CVE-2026-19296 development by creating an account on GitHub.

A beginner-friendly Python Vulnerability Scanner that detects open ports, basic security misconfigurations, and potential vulnerabilities, while generating a simple security assessment report. - ru...

Export HTML Table to Sheet. Contribute to gavodagbe/sheets-export-poc-spring development by creating an account on GitHub.

HackTheBox "Cobblestone" — Insane Difficulty — Second-Order SQLi to Twig SSTI to Cobbler RCE Writeup - FindYourBugs/cobblestone-writeup

A scalable LeetCode clone & Remote Code Execution (RCE) engine. Demonstrates how platforms handle heavy code-compilation by offloading to background workers using Node.js, BullMQ & ...

Linux vulnerability research from LinnemanLabs - security advisories, CVEs, exploits, reproducible PoCs. - linnemanlabs/advisories

轻量级 CAASM 与内网安全扫描工具，支持多来源资产归并、安全对账、服务识别、漏洞验证、变更 Diff 和报告，提供 CLI、API 与 Web 控制台。 - yuhuamiao/yscan

Contribute to s1lentf00thold/rConfig-3.9.4-rce development by creating an account on GitHub.

CVE-2026-76060 PoC for a ZoneMinder vulnerability leading to RCE - investigato/CVE-2026-76060_ZoneMinder_CommandInjection-PoC

A Python-based vulnerability scanner that analyzes security headers and web forms. - thanmaimudigonda6-web/Vulnerability-Scanner

SSRF protection that connects to the address it validated. - kmoneil/ssrfguard

Configurable non-public address allowlists for DeepSeek Harness web_fetch - Yurzi/dsh-web-fetch-enhanced

WordlistHub is a Burp Suite extension that lets pentesters browse, search, download, cache, and use wordlist like SecLists and custom GitHub wordlists directly inside Burp. Select a wordlist and st...

Enterprise Forensic Incident Response, Anti-Ransomware, Polyglot Webshell Quarantine & Zimbra Permission Healing Suite - alsyundawy/eradicate-zimbra-malware

A Python-based web vulnerability scanner for detecting open ports, identifying common services, checking service versions, and generating security reports. - Danny777-glitch/vulnerability-scanner

Signed device profiles, mobile exploit payloads, and KernelSU artifacts for Root My Device - WitAqua-tools/Root-My-Device-Payloads