WordPress wp2shell pre-auth RCE exploit kit (CVE-2026-63030 + CVE-2026-60137) - SentinelXofficial/sxwp2shell

WordPress REST API SQLi to RCE (CVE-2026-63030). Contribute to OffByOn3/wp2shell-poc development by creating an account on GitHub.

A small vulnerability scanner for projects that get their C/C++ dependencies from vcpkg - emabrey/vcpkg-vuln-scan

Cybersecurity Vulnerability Scanner is a Python-based security tool designed to identify common vulnerabilities in web applications and networks. It performs automated security assessments by scann...

Contribute to MathisFranel/POC-NodeRed-RCE-Import development by creating an account on GitHub.

Mini Vulnerability Scanner is an educational Python tool designed for learning the fundamentals of penetration testing and vulnerability assessment. - nagabalaji894-sketch/Vulnerability-Scanner

Priority-based status aggregator for WS2812B LED strips. ESP8266 firmware + Python daemon; any source (Claude Code, GitLab CI, scripts) drives it, most urgent wins. - Riscue/status-led

An isolated Vagrant testbed designed to simulate a complete attack chain: Initial access via the Nginx heap buffer overflow (CVE-2026-42533) followed by root privilege escalation using the Ghostloc...

PoC for CVE-2026-63030 + CVE-2026-60137, AKA WP2Shell - Crypto-Cat/wp2shell

Academic cybersecurity framework for analyzing payload encoding, obfuscation techniques, entropy metrics, and signature-based detection using a modular transformation pipeline. - DivyanshiKishore/c...

An end-to-end SOAR automation project integrating YARA, Splunk Enterprise, n8n, VirusTotal, Docker, and PowerShell to automate malware detection, threat intelligence enrichment, centralized logging...

ActiveScan++ Burp Suite Plugin. Contribute to albinowax/ActiveScanPlusPlus development by creating an account on GitHub.

Web App Risk Assessment | 4 Critical/High findings | SQLi 9.8 · XSS 7.3 · Brute Force 7.5 · CSRF 6.5 | CVSS · OWASP · ISO 27001 | Audit-grade report - Oracleo/GRC-Project-02-Web-Application-Securit...

用户用自然语言描述目标、关注漏洞、资产重要性和扫描约束，系统先用规则或 LangChain 结构化输出转成 Intent，再通过授权、域名白名单、私网和 DNS 策略门。策略通过后调用 Mock 或受控 Nuclei 扫描器。Nuclei、ZAP、Nessus 报告会被归一化成统一 Finding，通过稳定指纹去重，然后结合 CVSS、资产重要性、证据置信度做确定性风险评分。最后从 Chro...

A Python-based Web Vulnerability Scanner that detects basic Reflected XSS vulnerabilities in authorized web applications. It analyzes responses, identifies potential vulnerabilities, and generates ...

A comprehensive and growing web vulnerability scanner that aims to provide a professional report at the end of scanning - MacTash/web-cross

FreePBX 未认证SQL注入导致远程代码执行，FreePBX 15 (低于 15.0.66)、16 (低于 16.0.89)、17 (低于 17.0.3)。该漏洞位于商业化“endpoint”模块中，因对用户输入过滤不严，允许未认证的攻击者绕过管理员权限，执行SQL注入，并最终实现远程代码执行 - Neobee714/CVE-2025-57819-POC

Detect & clean up wp2shell (CVE-2026-63030) WordPress compromise — bulk-runnable, read-only by default - InstaWP/wp2shell-scan

WordPress Core Unauthenticated RCE (CVE-2026-63030, CVE-2026-60137) - 0xjessie21/wp2shell-checker

Authorized bug bounty & security research writeups — methodology, recon, and detection-bypass case studies. - afuckingco/security-writeups