Contribute to 0x00phantom-hat/CVE-2026-5029-Exploit development by creating an account on GitHub.

This repository implements a simplified PoC that demonstrates how signature malleability attacks using compact signatures can be executed. - pcaversaccio/malleable-signatures

This repository implements a simplified PoC that showcases how a contract can morph. A similar approach was used as part of the governance attack on Tornado Cash in May 2023. - pcaversaccio/tornado...

AI-assisted Burp Suite extension with JWT decoder, secret scanner, CVSS calculator, and more... - Gopesh-K/burpforge

Contribute to fetihcakmak/yara-rule-generator development by creating an account on GitHub.

「Web安全学习笔记与漏洞攻防手册，含 SQL注入/XSS/CSRF/SSRF/文件上传/命令注入 6类漏洞的复现、检测与防御方案。」 - genius1h/web-security-lab

WordPress wp2shell pre-auth RCE exploit kit (CVE-2026-63030 + CVE-2026-60137) - SentinelXofficial/sxwp2shell

WordPress REST API SQLi to RCE (CVE-2026-63030). Contribute to OffByOn3/wp2shell-poc development by creating an account on GitHub.

A small vulnerability scanner for projects that get their C/C++ dependencies from vcpkg - emabrey/vcpkg-vuln-scan

Cybersecurity Vulnerability Scanner is a Python-based security tool designed to identify common vulnerabilities in web applications and networks. It performs automated security assessments by scann...

Contribute to MathisFranel/POC-NodeRed-RCE-Import development by creating an account on GitHub.

Mini Vulnerability Scanner is an educational Python tool designed for learning the fundamentals of penetration testing and vulnerability assessment. - nagabalaji894-sketch/Vulnerability-Scanner

Priority-based status aggregator for WS2812B LED strips. ESP8266 firmware + Python daemon; any source (Claude Code, GitLab CI, scripts) drives it, most urgent wins. - Riscue/status-led

An isolated Vagrant testbed designed to simulate a complete attack chain: Initial access via the Nginx heap buffer overflow (CVE-2026-42533) followed by root privilege escalation using the Ghostloc...

PoC for CVE-2026-63030 + CVE-2026-60137, AKA WP2Shell - Crypto-Cat/wp2shell

Academic cybersecurity framework for analyzing payload encoding, obfuscation techniques, entropy metrics, and signature-based detection using a modular transformation pipeline. - DivyanshiKishore/c...

An end-to-end SOAR automation project integrating YARA, Splunk Enterprise, n8n, VirusTotal, Docker, and PowerShell to automate malware detection, threat intelligence enrichment, centralized logging...

ActiveScan++ Burp Suite Plugin. Contribute to albinowax/ActiveScanPlusPlus development by creating an account on GitHub.

Web App Risk Assessment | 4 Critical/High findings | SQLi 9.8 · XSS 7.3 · Brute Force 7.5 · CSRF 6.5 | CVSS · OWASP · ISO 27001 | Audit-grade report - Oracleo/GRC-Project-02-Web-Application-Securit...

用户用自然语言描述目标、关注漏洞、资产重要性和扫描约束，系统先用规则或 LangChain 结构化输出转成 Intent，再通过授权、域名白名单、私网和 DNS 策略门。策略通过后调用 Mock 或受控 Nuclei 扫描器。Nuclei、ZAP、Nessus 报告会被归一化成统一 Finding，通过稳定指纹去重，然后结合 CVSS、资产重要性、证据置信度做确定性风险评分。最后从 Chro...