SSRF guard and upstream-transport helpers extracted from BusinessMCP's MCP gateway (MIT) - businessmcp/mcp-gateway

Blood donor-hospital matching platform: Spring Boot 3, PostgreSQL, Redis GEO matching, RabbitMQ notifications, Quartz escalation jobs, React frontend - Suchetan1265/lifelink

A utility to obfuscate and encrypt shellcode. Contribute to grit8086/mimic development by creating an account on GitHub.

Automated vulnerability assessment and risk analysis platform with Nmap scanning, CVE intelligence, binary analysis, YARA threat detection, and PDF security reporting - mustafajaved304/VulnX

Web 安全漏洞复现实践仓库，记录漏洞原理、环境搭建、完整利用流程与修复方案，基于 Vulhub. Contribute to Qitangwen/vul-study development by creating an account on GitHub.

JimuReport 2.5.1 pre-auth RCE: auth bypass via hardcoded X-Sign secret + Aviator expression injection + sandbox escape (CVE PoC) - mhtsec/jimureport-2.5.1-rce

An interactive, all-in-one Active Directory enumeration and attack framework that unifies Responder, NTLM relay, IPv6 attacks, password spraying, and Impacket tooling into a single guided workflow....

Lord Megatron is a 1 click vulnerability scanner. Contribute to d3ath69/Megatron development by creating an account on GitHub.

2022计算机毕设一套 终稿 （论文+前后端程序源代码）基于shiro框架的渗透测试研究_e55821e8-81e7-4719-aaf7-abbfc684ba7d.zip - boom5497/VKdQQQXC

2022计算机毕设一套 终稿 （论文+前后端程序源代码）基于Jboss框架的渗透测试研究_7343e07d-dc1f-43ad-807b-cb4efaff1aa5.zip - boom5497/GaMMFkst

Operational research on the modern multi-stage chain - MalikHettige/desync-saml-orm-ssti-chain

Modular, non-destructive web application vulnerability scanner (SQLi, XSS, CSRF detection) with a Bootstrap 5 executive HTML report. - mstnisa/pyvscan

Millelith's vulnerability scanner tools. Contribute to Millelith/scanner development by creating an account on GitHub.

Unauthenticated arbitrary file upload -> RCE in WPLP Cookie Consent (gdpr-cookie-consent) <= 4.4.1 - technical write-up and PoC - ghostpels/CVE-2026-75865

A PoC and automated version detection/exploit tool for JetBrains TeamCity Authentication Bypass & RCE (CVE-2023-42793). - burakacar6/CVE-2023-42793-TeamCity-Unauthenticated-RCE

A/B Docker lab + PoC for CVE-2026-32475 (Elementor Pro Forms unauthenticated arbitrary file upload -> RCE via validation/move loop desync) - dinosn/cve-2026-32475-elementor-pro-lab

CVE-2026-32475 PoC : Elementor Pro Unauthenticated Arbitrary File Upload to RCE - 4minx/CVE-2026-32475

Public JWKS for a bug-bounty SSRF/JWT PoC (contains only an RSA PUBLIC key) - Tedixx/jwks-poc-9f3ab2

gpgsm CVE-2026-57062 exploit POC. Contribute to goldendivider/gpgsm-cve-2026-57062-cms-gcm-short-tag development by creating an account on GitHub.

postgres CVE-2026-6471 Exploit. Contribute to goldendivider/cve-2026-6471-postgres-logical-decoding-dlopen development by creating an account on GitHub.