An educational, intentionally vulnerable Laravel security lab for practicing web penetration testing and secure code review (SQLi, Stored XSS, Path Traversal, CSRF, IDOR). Graduation project for DE...

Ghostlink HTB — Full Chain AD + Gogs Exploitation | MQTT → NTLM Relay → Path Traversal → CVE-2025-8110 → ADCS ESC11 → DCSync | AMN SECURITY - amnsecurity/ghostlink-writeup

CPM PoC: evil Stable Diffusion WebUI extension (JHU 601.441 research) - Honeymalik007/cpm-poc-sdwebui-ext

Burp Suite extension exposing a security-aware MCP server over SSE, giving AI assistants structured access to Burp's scanner, sitemap, scope, cookies, and annotations - tcyph3r/burp-mcp-companion

Security researcher's BurpSuite plugin collection 2026: non-BApp extensions, custom Java plugins, request tools, SQLMap integration, Shiro & WAF scanners, Python automation scripts....

Contribute to iagosantostech/xss-poc development by creating an account on GitHub.

OPPO Find N2 GhostLock (CVE-2026-43499) exploit adaptation - pubglite55/oppo-ghostlock

A deliberately vulnerable FinTech web application for web application penetration testing practice. - Cookies307/fintech-vuln-app

PoC for CVE-2026-49230: Apache APISIX jwe-decrypt authentication bypass (missing AES-GCM tag validation, CWE-354, CVSS 9.1) - BiiTts/CVE-2026-49230-APISIX-jwe-decrypt-Auth-Bypass

Contribute to 0x00phantom-hat/CVE-2026-12400-Exploit development by creating an account on GitHub.

A malware traffic analysis investigation of a NetSupport RAT infection using Wireshark, including IOC identification, C2 analysis, and incident documentation. - nzubeio/netsupport-rat-analysis

A fast, reactive graphical interface for managing Sliver C2 operations, powered by Wails and Svelte. - Gubarz/sliver-gui

A Python-based Network Vulnerability Scanner for TCP port scanning, service detection, risk analysis, and report generation. - avishkar-jadhav/network-vulnerability-scanner

VulnScanner is a modular, asynchronous vulnerability scanner that goes far beyond simple port scanning. **WARNING: This tool is intended ONLY for authorized security assessments.** - moblank9/vulns...

Comprehensive ransomware prevention, detection, and response framework aligned with CISA advisories - mrezwanulbari/ransomware-defense-framework

Defense-in-depth reference framework with YARA/Sigma detection templates and incident playbook structures for enterprise SOC teams - mrezwanulbari/cybersecurity-defense-frameworks

Librebooking Admin RCE PoC CVE-2026-61343. Contribute to nmagill123/CVE-2026-61343-poc-librebooking-rce development by creating an account on GitHub.

CVE-2026-53359漏洞补丁. Contribute to xj2268-TA/KVM-Januscape development by creating an account on GitHub.

Simple vulnerability scanner for reconnaisance. . Contribute to tearz52/vuln-scanner development by creating an account on GitHub.

poutine, a supply chain vulnerability scanner for build pipelines - boostsecurityio/poutine