Unauthenticated SQL injection to RCE exploit for ZoneMinder 1.29/1.30 (CVE-2016-10204, EDB-41239). Single-command SQLi to webshell to reverse shell PoC in Python. - akash0x00/zoneminder-1.29-1.30-r...

Contribute to chsxthwik/XSS development by creating an account on GitHub.

A deliberately vulnerable Spring Boot business app for learning Java code audit and exploitation. 面向新手的 Java 传统漏洞代码审计与利用靶场 - s0m30ne/JavaGoat

CVE-2026-88854 — OrdaSoft Joomla Gallery unauth SQLi PoC (check / mass scan / EXTRACTVALUE read) - murrez/CVE-2026-88854

Guarded, source-only Humane AI Pin root PoC for CVE-2026-43499 - TheAndersMadsen/humane-aipin-ghostlock

Beginner-friendly Python web vulnerability scanner for reconnaissance, HTTP security header analysis, port scanning, and basic SQLi/XSS detection. - SilentSpectre-arch/webvuln

Static Malware Analysis Tool Integrated With AI to generate Reports - ElDShell/static_malware_analysis

Static analysis and OSINT on CryBound, a subscription RAT delivered as a Minecraft mod. Sanitized case study with IoCs, YARA and Sigma. - ViniciusZanonato/crybound-cti

AI-native security research framework. Scans for SSRF, IDOR, XSS, SQLi, open redirect, and more — every finding carries a reproducible evidence chain with PoC scripts. 9 free AI providers, 17 tests...

2022计算机毕设一套 终稿 （论文+程序源代码+使用说明)基于django的防一般web漏洞的人事管理系统_911fe0c2-b143-4a6f-938f-09a06ca2da8e.zip - fireditoo/aNOcSrOq

Reusable Jenkins CI/CD pipeline for automated test execution, environment selection, retry handling, and JUnit reporting. - YasaswiniMetla/jenkins-test-automation-pipeline-poc

Passive web vulnerability scanner. Contribute to adwaith032007/vulnscan-lite-upgraded development by creating an account on GitHub.

Contribute to lankinenxyz/nuclei-style-scanner development by creating an account on GitHub.

Proof-of-concept and instrumented reproduction harness for CVE-2026-28609, an out-of-bounds write in Android's MatroskaExtractor reachable via a crafted WebM file with a big-endian PCM audi...

提权输入桥：让 Codex Computer Use 与普通权限自动化脚本能够操作以管理员身份运行的程序窗口，绕过 UIPI 的限制 - SENECA-wendy/elevated-input-bridge

pentest_rs(agent plugin 层):五域 skill(资产侦察/漏洞扫描/漏洞利用/后渗透操作/攻击产物分析)+ rs-scripting 创作技能,教 agent 使用并按需编写沉淀 rust-script 脚本。执行层在 raystyle/prs_workspace(pdt = Pentest Development Toolkit)。仅限合法授权测试。 - rayst...

WpBuddy, A WordPress vulnerability scanner. . Contribute to DalmatianuSebikk/wpbuddy-security-scanner development by creating an account on GitHub.

Contribute to amnotacat4074/vans-xss-poc development by creating an account on GitHub.

Detection & precondition-verification tool for CVE-2026-58231 (SAP Commerce Cloud Data Hub Adapter) - WildanDeveloper/CVE-2026-58231

Unauthenticated Arbitrary Shortcode Execution. Contribute to Polosss/By-Poloss..-.CVE-2026-89274 development by creating an account on GitHub.