SSRF-safe HTTP fetching for Go — resolved-IP dial guard that defeats DNS rebinding. Blocks metadata endpoints, private ranges, loopback. Zero dependencies. - varunmahajan1/ssrfguard

AI vulnerability scanner for CI/CD. Contribute to varkeymjohn/LangGraph-SAST-CICD development by creating an account on GitHub.

Scan WordPress installations for wp2shell vulnerabilities (CVE-2026-63030 + CVE-2026-60137). Identifies full RCE and SQL injection risks across multiple sites with severity classification and CSV r...

StockX is a decentralized, AI-powered stock exchange platform designed to enable secure, transparent, and near-real-time trading of tokenized equities. - technicalpro/StockX-POC

Developed a malware analysis web application using Python, Flask, Docker, and YARA. Implemented secure file uploads, automated malware scanning, detection scoring, and detailed report generation wh...

POC Exploit for oscommerce-2.3.4. Contribute to raikoho/oscommerce-2.3.4-rce development by creating an account on GitHub.

PoC reproducer for CVE-2026-56139 (Apache Camel camel-undertow Rest DSL): the Rest DSL binding hard-codes muteException=false, so a configured muteException=true is ignored and an uncaught exceptio...

Pre-auth RCE PoC for WordPress core — chains CVE-2026-63030 (REST /batch/v1 route-confusion desync) with CVE-2026-60137 (author__not_in SQLi) into an unauthenticated shell. Authorized testing only....

PoC reproducer for CVE-2026-55994 (Apache Camel camel-iggy): the consumer copies an Iggy message's user-headers onto the Exchange unfiltered, so an injected CamelHttpUri drives a server-sid...

Contribute to Binary-Assassin/Altai-A8n-AC-Firmware-v2.2.1.1935-Stored-Cross-Site-Scripting-XSS- development by creating an account on GitHub.

Contribute to BdYyWrez/fastjson1.2.66-1.2.83-Exploit-tool development by creating an account on GitHub.

AR-GhostNet` is a high-performance, modular network reconnaissance and exploitation framework. Designed for stealth, speed, and precision, it integrates adaptive payloading and advanced network fin...

玄盾 XUANDUN · AI 攻防靶场系统 — 面向红蓝对抗训练的 AI 攻防靶场 / 多智能体强化学习 - TrueFurina/xuandun-cyber-range

Burp Suite extension for JWT multi-role broken access control testing — auto-discovery, access matrix, privilege hierarchy, JWT attacks, HMAC cracker, IDOR analysis - Guarina0x0/rolebreaker

PoC reproducer for CVE-2026-55993 (Apache Camel camel-atmosphere-websocket): the WebSocket consumer copies connection query parameters onto the Exchange unfiltered, so an injected CamelHttpUri driv...

越权漏洞（IDOR）与业务逻辑漏洞修复 — Flask 个人中心权限校验、CSRF防护、金额正负校验、速率限制、余额持久化 - fankfc/Class04-Authorization-BusinessLogic-Fix

a python script for encoding shellcode, and then adding it to the syntax script files in C for bypassing AV 2026 - Wissemben84/shellcod_encoder

Contribute to hg0434hongzh0/fastjson-1.2.83-getresource-rce-lab-java-only-20260722-155842 development by creating an account on GitHub.

Moteur de capture et d'analyse web durci : recon anti-bot, analyse de HTML hostile, sessions interactives isolées. Séparation de privilèges, conteneurs éphémères, garde SSRF. - guatxlabs/ocular

SSRF prevention for Laravel. Protect Http::, Guzzle, and validate user-supplied URLs against server-side request forgery. - securized/laravel-ssrf