Pre-auth path traversal to arbitrary file delete in Avada (Fusion) Builder <= 3.15.3 leading to RCE (CVSS 9.1) - shinthink/CVE-2026-8713

A vulnerable Boot-to-Root CTF lab machine simulating a hospital environment. Features a realistic 17-step attack chain including SQL Injection, XSS, Session Hijacking, SSH access, password cracking...

Proof of Concept (PoC) for CVE-2026-49975 – HTTP/2 server memory exhaustion attack leveraging HPACK amplification and connection retention (HTTP/2 Slowloris). - Manisso/http2-bomb

A full-stack, distributed online judge platform. Features a secure, multi-language Remote Code Execution (RCE) sandbox using Docker, asynchronous task queues with Redis/BullMQ, and a responsive Nex...

PoC for a Critical stack-based buffer overflow in GNU libextractor ≤ 1.14. A malicious .doc file triggers an unbounded VLA allocation causing unconditional DoS. In multi-threaded environments, it b...

AI-powered network scanner & vulnerability scanner — nmap + Python + Flask + React. CLI, Web UI, API & PDF reports for pentesting & recon. - frangelbarrera/Network-Scanner

Pre-auth RCE scanner for Langflow < 1.8.0 — Route Injection + Vertex Injection → Code Execution (CVSS 9.8) - shinthink/CVE-2026-27966

Pre-auth arbitrary file upload RCE exploit for iCagenda Joomla extension < 4.0.8 (CVSS 10.0) - shinthink/CVE-2026-48939

A comprehensive, multi-OS Adversary Simulation Framework. (BETA) - julianmoodie/Cosmos-Orbit-C2

Defensive CTI teardown of a June-2026 Mustang Panda (Earth Preta / TA416) operation against India's government and hydropower sectors: independent RE of SHARDLOADER, MINIRECON, and the ZOHO...

Dependency-free Python vulnerability scanner: port scan, outdated-software & weak-config detection, JSON/HTML reports - Ak5hat-Gupta/vulnerability-scanner

【Java计算机毕业设计分享】基于Django的防漏洞人事管理系统，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - jahnfrens/nlVtrqiCow

A deliberately vulnerable web app for practicing OWASP attack patterns, built with Node.js, Express, and SQLite. It ships with real SQL injection and stored XSS bugs you can exploit, then flip a ru...

Single static-binary recon orchestrator in Go: chains subfinder, httpx, nmap, nuclei, ffuf, katana + injection testing (dalfox/crlfuzz/sqlmap), with dedup, diff-based webhook alerts, an interactive...

Advanced Python-based Vulnerability Scanner with Port Scanning, Risk Analysis, PDF/CSV Reports, and GUI for Cyber Security Learning. - SAURABH8064/Advanced-Vulnerability-Scanner

Cyber security . Contribute to vanshyadav-coder/Web-Application-Vulnerability-Scanner development by creating an account on GitHub.

Contribute to Eliot-code/CVE-2026-22874-PoC development by creating an account on GitHub.

XPI — offensive security tools for Pi Agent: casefile, exploit search, web lookup, code intelligence, todo tracker - x4cc3/pi-xpi

ENDGAME C2 Framework — Advanced Red Team Command & Control - endgamec2framework/endgame