A small Python toolkit that turns malware triage notes into clean reports, a browsable IOC dashboard, and YARA rules, with write-ups of some Windows lab samples - samdem-ai/malware-lab

Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content - erberkan/CVE-2026-42536-PoC

Curated collection of strict, zero-false-positive Nuclei v3 templates for bug bounty automation, infrastructure reconnaissance, and exposure hunting. - comradezephyr/nuclei-recon-templates

Lightweight C2 framework in Go with encrypted communications and interactive shell - ispectr3/c2-lite

Documentation on my experience writing my first working position independent shellcode for windows from scratch using x64 assembly - wizardy0ga/coding-my-first-position-independent-shellcode-for-wi...

The Smart AI Pentesting Agent is an automated vulnerability scanner that combines traditional payload-based testing with intelligent detection mechanisms. It can identify: SQL Injection (Error-base...

Autonomous agent that mines Java deserialization gadget chains from any JAR directory. Static bytecode analysis + dynamic JVM probes + dual-model adversarial auditing → weaponized PoC. Solving the ...

Burp Suite extension that automates SQL injection detection (error/boolean/time-based, confidence-scored), WSTG-INPVAL-05. Detection only; exploitation stays manual. - Wu-Falin/burp-sqli-detector

A C2 Framework (Command & Control) tool developed for red team operations and educational research. It uses Telegram as its C2 channel and encrypts data with a Base64 + XOR combination. -...

Burp Suite extension that turns a request or response into a clean, report-ready PoC screenshot: hides browser noise headers, blurs secrets, removes lines. Repeater, Logger and Proxy. - Ginnz1337/B...

Web Vulnerability Scanner for SQL Injection and XSS Detection - inowpss/web-vulnerability-scanner

POC GitLab CE/EE unauthenticated arbitrary file read vulnerability (CVE-2026-85706). - gagaltotal/CVE-2026-85706-gitlab-poc

CCTV — HackTheBox | CVE-2024-51482 ZoneMinder SQLi, bcrypt crack, CVE-2025-60787 motionEye RCE for root - ledksv/cctv

A Python Flask Web Vulnerability Scanner prototype that scans websites for missing security headers and basic input vulnerabilities, displaying results via a simple web interface. Task 1 establishe...

Automated web vulnerability scanner for authorized security testing. Zero dependencies, stdlib-only Python: scope-gated SQLi/XSS/redirect/header/path checks, boolean-blind extraction, offline lab, ...

Developed a Python-based network vulnerability scanner using Nmap and python-nmap to automatically discover live hosts, open ports, and running services on local networks. - CodeWithHusain/Home-Net...

Recon and vulnerability scanning tools that run in your terminal. Find subdomains, scan ports, discover hidden paths, fingerprint what's running, and check it for vulns. - clickswave/crossf...

JFrog Artifactory 预认证全链 RCE 复现项目（CVE-2026-42018 / CVE-2026-65616 / CVE-2026-65615）：完整攻击链报告、7.146.7 Docker 复现交付物（EXP / 部署 / 基线验证 / payload 样本 / 恢复工具） - BL0odz/JFrog_CVE-2026-65615-ByGLM

A Flask-based Cybersecurity Vulnerability Scanner for authorized security testing. It checks HTTP security headers, HTTPS and SSL/TLS configuration, server information disclosure, and common securi...

Web application penetration testing lab using DVWA, demonstrating SQL Injection, Stored XSS, Command Injection, File Inclusion, and CSRF in a controlled Kali Linux environment. - Snehal1225/DVWA-We...