CVE-2026-29204: upgrade-first notes, optional client-area hook, and lab PoC for authorized testing. Unofficial; not from WHMCS. - bogdanrotariu/cve-2026-29204-whmcs-clientarea-addonid

Windows进程溯源处置工具. Contribute to SharkJ0001/ProScanKill development by creating an account on GitHub.

testing EE environment [SCM] xxe1sfvu. Contribute to test-rhaap-portal/xxe1sfvu development by creating an account on GitHub.

Two-stage Nuclei detection for CVE-2026-34475: fingerprint vulnerable Varnish instances, verify cache-key collision behavior, and confirm exploitability via VCL inspection - unfortunetly without tr...

🏦 Intentionally vulnerable banking app — VAPT demonstration with 6 planted vulnerabilities (SQLi, XSS, IDOR, CSRF, Broken Auth, Privilege Escalation) - MR-harshgulrajani/bankbreaker

Contribute to Bhuvanesh2024/-xxe-xlsx-tool development by creating an account on GitHub.

🔍 Analyze WSUS deserialization behavior to enhance security, generate reports, and identify configuration weaknesses in your infrastructure. - salman5230/CVE-2025-59287

CVE-2026-0001. Do with your own risk. Contribute to HORKimhab/CVE-2026-0001 development by creating an account on GitHub.

A BDD testing framework. Contribute to robertcoltheart/burpless development by creating an account on GitHub.

OOB verifier for GHSA-c4j6-fc7j-m34r / CVE-2026-44578 (Next.js WebSocket-upgrade SSRF) - panchocosil/verify-ghsa-c4j6-fc7j-m34r

Advanced SSRF detection and exploitation framework — bypass payloads, cloud metadata harvesting, internal port scanning, gopher/dict/ldap attacks, and JSON reporting. - TheMursalin/SSRFKiller

DVWA v1.9 全等级漏洞复现与渗透测试报告 | 环境：Kali 2026 + Apache + MariaDB + PHP 8.4 | 包含漏洞复现步骤、笔记与渗透报告 - lyz618/DVWA-Web-Vulnerability-Project

LangGraph RAG 知识库系统 — 混合检索 / 文档管理 / 流式输出 / 引用溯源. Contribute to wzbb66/knowledge development by creating an account on GitHub.

Host Collector 是一款开源的主机溯源与取证 CLI 工具，用于采集 Windows/Linux 主机的进程、网络、日志及启动项等证据，生成 JSON报告，支持离线分析与定制化扫描。 - JiangJiYue/host-collector

Scanner modular de vulnerabilidades web construido con Node.js y TypeScript. Detecta XSS, CORS, headers inseguros, cookies y CSRF. - Atna2007/ariel-security-scanner

AI Burp Copilot v2 是一个基于 Burp Suite Montoya API 的 AI 辅助渗透测试插件。它的目标不是替代被动扫描器，也不是让大模型自由发挥去“猜漏洞”，而是把 Burp 中真实经过的 HTTP 流量转化为可审计、可复放、可验证的安全分析工作流。 - zxcvbn001/AI-Burp-Copilot

Advanced Python web scraper for quotes.toscrape.com — handles login with CSRF tokens, session management, and dynamic content with Selenium/Playwright. Part of my data-engineering portfolio. - diog...

Claude Code skill to scan machines for Mini Shai-Hulud (CVE-2026-45321) supply chain worm IOCs - shayr1/shai-hulud-scan

Contribute to dmknght/GravityzoneLPE_0day development by creating an account on GitHub.

Detect CVE-2026-45321 Mini Shai-Hulud supply chain compromise — scans for 170 npm + 2 PyPI poisoned packages across TanStack, Mistral AI, UiPath, OpenSearch, Guardrails AI - qi-scape/scan-shai-hulud