A secure web-based student voting system using fingerprint authentication. Built with Python Flask, Firebase Firestore, and Flask-WTF. Features CSRF protection, double-vote prevention, session mana...

Stealth headless browser for AI agents — bypass Cloudflare, bot detection, and anti-scraping. Drop-in Puppeteer/Playwright replacement. - jo-inc/camofox-browser

astrbot上下文注入插件，防止压缩后丢失记忆。叶枔枖设计，沈砚清编写。. Contribute to yussica1016/astrbot_context_injection_system development by creating an account on GitHub.

CVE-2026-41177, a Blind SSRF vulnerability in Squidex CMS (prior to v7.23.0). Includes root cause analysis, reproduction steps, and impact assessment regarding Local File Interaction (LFI). - Turki...

CVE-2026-41651. Contribute to 0xBlackash/CVE-2026-41651 development by creating an account on GitHub.

DNSly is an iOS app that uses DNS tunneling to bypass internet censorship. - breakthebarriers/DNSly

هذا المشروع هو عبارة عن نظام جسر شبكي افتراضي (Virtual Network Bridge) مصمم لتسهيل الاتصال بين جهازين (Peer-to-Peer) عبر وسيط سحابي، مع حل مشكلة تضارب المنافذ المحلية. - BayLak-Egypt/c2-free-google...

Role-based ERP for colleges — Flask + MySQL portal for students, faculty, and admins with OTP auth, CSRF, rate limiting, and Chart.js analytics. - aakri0/student-erp-management-system

Early warnings before threats hit your stack. Zero-days, supply chain attacks and active exploits: curated and filtered to your tools. - Richard3332/0day-app

Security assessment report of a deliberately vulnerable web application, demonstrating exploitation of SQL Injection, Command Injection, Cross-Site Scripting (XSS), and Authentication Bypass vulner...

An automation tool to help copying content from local repository to web application of ChatGPT, Claude and Gemini. - tzencirkiran/c2llm

Marimo Pre-Auth RCE. Contribute to h3raklez/CVE-2026-39987 development by creating an account on GitHub.

Production-grade async web vulnerability scanner - SQLi, XSS, SSRF, LFI - shamoon572/web-vuln-scanner

XuanLink 是一款 Web 端 WebShell 管理平台，支持多类型 WebShell 接入与统一控制，提供命令执行、文件操作、会话管理与代理能力，适用于分布式环境下的远程运维与安全测试场景。 - Alex-LILY/XuanLink

File Upload to Remote Command Execution and Privilege Escalation (DVWA Lab) - danarhirany300-ctrl/DVWA-File-Upload-RCE

yo yo . Contribute to 0day77/0day77 development by creating an account on GitHub.

Discovering SSRF vulnerabilities through AI agents in web applications. - LordranOnion/llm2ssrf

Incident response lab using OsQuery to investigate a simulated C2 backdoor on a Windows 10 endpoint. Includes SQL queries, MITRE ATT&CK mapping and notes on OsQuery limitations. - pedrof-ro...

VulnHub Bulldog:1 — Boot-to-root via Django hash leak, command injection & nc reverse shell. - MoriartyPuth-Labs/Bulldog1-Lab

Contribute to CoderGUY47/c2c-book-hub development by creating an account on GitHub.