Unauthenticated Local File Inclusion. Contribute to Polosss/By-Poloss..-..CVE-2026-7515-PoC development by creating an account on GitHub.

Web application penetration test on OWASP Juice Shop — 20 vulnerabilities found (5 Critical) including SQLi, XSS, IDOR, XXE & more. Full professional report with PoC exploits. - amenifayech...

Proof of Concept exploit for CVE-2026-26899 in OpenWrt luci-app-https-dns-proxy - iwallplace/CVE-2026-46368-OpenWrt-Exploit

Sigma YARA Rule to KQL Rule Converter Tool. Contribute to vincevi1375/sigma2kql development by creating an account on GitHub.

Security assessment of DVWA: SQL Injection and XSS across Low/Medium/High tiers, with a professional PDF report and a custom Python automation script. - pablenr/dvwa-security-assessment

TongWebExploit 是一款面向 TongWeb 反序列化漏洞场景的图形化检测与利用工具，支持漏洞探测、命令回显、EL 表达式执行、内存马注入和批量检测。 - CurlySean/TongWebExploit

A PoC/exploit written in python for the vulnerability CVE-2026-3359 situated within Form Maker by 10Web. - itsthalisman/cve-2026-3359-exp

A hands-on cybersecurity lab simulating a SSRF attack against an AWS EC2 instance, inspired by the 2019 Capital One breach - Aireck2/cyber-project-01

Chrome extension for real-time detection of potential DOM-based XSS vulnerabilities and unsafe data flows. - raghavsec/Real-DOM-XSS-Monitor

Burp Suite Professional Full Version Download | v2024.1.3 Pre-Activated Installer with Patch & Keygen | Cybersecurity Toolkit. - FreighterPlug/BurpSuite-Professional-2024.1.3-Full

Dependency vulnerability scanner with CVE lookup and SBOM generation. - mandiioxbt/dependency-audit-scanner

Free penetration testing tool & network vulnerability scanner with EPSS/KEV exploit-aware prioritisation. Open-core: MIT-licensed Go components. Windows, macOS, Linux. - safetylab/ShadowSec...

Contribute to j4xx3n/Nuclei-Templates development by creating an account on GitHub.

Deliberately-vulnerable Go MCP server (SSRF) — dynamic CVE-hunting test fixture - abhijeet497/vuln-ssrf-go-mcp

YARA and Sigma Rules. Contribute to 0xelikhan/detection-rules development by creating an account on GitHub.

Fastjson / Jackson 反序列化漏洞自动化检测工具，支持 LDAP / RMI / DNSLog / 本地 HTTP 多种回连验证方式 - fewftybet/FastJsonExp

A vulnerability in LiteSpeed cPanel Plugin before 2.4.8 and WHM Plugin before 5.3.2.0 mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLin...

Contribute to iVanny11-tech/fortinet-security-labs development by creating an account on GitHub.

GSoC 2026 POC | Loan Origination System for Apache Fineract external Spring Boot service with state machine, multi-stage approval workflow, rule-based credit scoring, and Fineract disbursement brid...

This lab demonstrates the exploitation of CVE-2024-24945, a heap corruption vulnerability affecting NGINX. The objective was to understand how memory corruption can lead to Remote Code Execution (R...