Automated suspicious-file analysis with Python, ClamAV, YARA, CAPEv2, Sysmon and Wazuh - anaselkarkouri/poc-malware-control

Contribute to Kyzerz53/Cross-Site-Scripting-XSS- development by creating an account on GitHub.

Python PoC for CVE-2026-33439, an OpenAM pre-authentication RCE via jato.clientSession deserialization - infernosalex/CVE-2026-33439-Python-PoC

Burp Suite extension that passively discovers APIs in Proxy traffic and generates OpenAPI 3.1 specifications and Postman collections. - JonsTech/reverse-api-burp

Contribute to itsanwar/rust-recaptcha-bypass development by creating an account on GitHub.

cve-2026-85706-poc-exploit-gitlab. Contribute to 0xlyvio/cve-2026-85706-poc-exploit-gitlab development by creating an account on GitHub.

A GitHub action that can be used to run vulnerability checks using the 10up WP-CLI Vulnerability Scanner - jazzsequence/action-wordpress-vulnerability-scanner

Scoped, rate-limited bug bounty recon tooling in Bash + HackerOne report templates - Ngelcondor/bb-recon-toolkit

Pentesting DVWA across SQLi, XSS, Command Injection, File Inclusion, File Upload, Brute Force, and CSRF — Low to High difficulty - Mahhyya/DVWA-Web-App-Pentesting

Custom Nuclei templates for IDOR, SSRF, JWT attacks, WAF bypass detection, and secrets exposure - unrandoms/nuclei-bb-templates

Cyber security and ethical hacking .The project:1password strength Analyzer 2Data encryption and decryption tool 3phishing email simulation 4simple vulnerability scanner - anushree-cyber1/Cyber-sec...

Stealth focused DNS C2 with Shadow Mesh architecture and malleable timing and payloads for Adversary Emulation. - abb3rrant/Unkn0wnC2

A practical XSS lab covering Reflected, Stored, and DOM-based Cross-Site Scripting vulnerabilities, with multiple beginner-friendly scenarios to help learners understand and practice different XSS ...

Contribute to lepemiran47-png/Stored-XSS-and-Session-Hijacking-Simulation- development by creating an account on GitHub.

University Project of developing a template for safely testing for the CVE 2025-24813 on a server. It is intentionally made to not leave any lasting artifacts on the server and does not disrupt its...

Contribute to lepemiran47-png/Blind-SQL-Injection-Reflected-XSS-and-Stored-XSS development by creating an account on GitHub.

PhantomRecon — Professional bug bounty vulnerability scanner with CLI + Streamlit dashboard - jaylukdevelopment/PhantomRecon

CTF多层内网渗透辅助工具. Contribute to ProbiusOfficial/pivothub development by creating an account on GitHub.

Deliberately vulnerable API reproducing a real-world exploit chain: nOAuth ATO → LFI → JWT Forgery → RCE. 7 Docker-based labs with walkthroughs. From an authorized bug bounty engagement. - Boubekeu...

CTPAX - reverse-engineering MCP server: Ghidra, x64dbg, Nuclei, Metasploit, Wireshark, forgery & license-gate tooling (248 tools) - Takopipipi/CTPAX