Walkthrough for Codify (Linux - Easy). Exploits vm2 RCE (CVE-2023-30547), SQLite DB hash extraction, Bcrypt cracking with John, and Privilege Escalation via Bash wildcard comparison in `mysql-back...

CVE-2026-66066 (KindaRails2Shell) PoC - Rails Active Storage/libvips arbitrary file read to RCE; for authorized security testing - HackSpeak/kindarails2shell-poc

Bibliotek for å validere tokens fra Wonderwall og utføre On-Behalf-Of Exchange mot både Azure og IDporten - navikt/oasis

Find fastjson in your JARs and Spring Boot fat-JARs, and check exposure to CVE-2026-16723. Zero dependencies, fully offline. 一条命令排查 fastjson 漏洞影响范围。 - xiaoqiMikko/fastjson-check

CVE-2026-60004 — Gitea/Forgejo Diffpatch Git Hook RCE. Bare clone → post-index-change hook injection. CVSS 9.8 | CWE-94 | Gitea < 1.27.1 - shinthink/CVE-2026-60004

CVE-2026-16232 (Check Point SmartConsole authentication bypass) PoC - unauth to admin; for authorized security testing - HackSpeak/checkpoint-smartconsole-poc

A lightweight Python vulnerability scanner that maps open ports and service banners to known CVEs. - Crow-developers/vulnscope

极域电子教室 UDP 重放攻击研究与渗透测试工具集. Contribute to yangsongh/JiyuUdpAttack development by creating an account on GitHub.

CVE-2026-64531 (OVSwrap) PoC - Linux kernel Open vSwitch LPE; for patch validation and security research - HackSpeak/ovswrap-poc

Manual web application penetration testing of OWASP Juice Shop using Burp Suite Community Edition. Identified and validated SQL Injection, XSS, Broken Access Control, Sensitive Data Exposure, and B...

Full Boot2Root writeup for TryHackMe's "Do Not Disturb" room (Hacker Holidays 2026) — NoSQL injection auth bypass → EJS SSTI/RCE → exposed Node inspector abuse → disk-grou...

A Python-based web vulnerability scanner that identifies missing security headers, scans open ports, checks SSL/TLS configurations, detects directory listing, and discovers common web security vuln...

An End-to-End AWS Serverless PoC demonstrating the Saga Pattern, distributed transactions, and automated microservice rollbacks using Spring Boot and Step Functions. - jamesiit/distributed-ride-hai...

授权式本地自动化渗透测试桌面工具。PenScope 是一款面向安全测试人员 / 授权渗透测试场景的桌面应用。它把端口扫描、Web 漏洞扫描（SQL 注入、XSS、CSRF、文件上传）、利用验证、报告生成等工作流整合在一个原生窗口中，所有逻辑都在你本机运行，不依赖任何远程服务器，也不需要账号密码。 - wanlqx/PenScope

Code injection (RCE) in datamodel-code-generator via unvalidated customBasePath (CVE-2026-63720) - rahulreddykarne/CVE-2026-63720-datamodel-code-generator

Contribute to nostdlib/CSharpShellcodeInjector development by creating an account on GitHub.

VampSecure Labs — Laboratorio shellcode ARM64: mmap RWX, syscalls directas y ejecucion de codigo nativo - Vampsecure-Labs/vamp-shellcode-lab

SecureScanPRO is a Flask-based web application vulnerability scanner that automates website security assessment. It performs URL validation, website crawling, endpoint discovery, HTTP security head...

CVE-2026-32941 PoC - Sliver Remote OOM. Contribute to skoveit/CVE-2026-32941 development by creating an account on GitHub.

All the concept I learn during the project "Network Recon & Vulnerability Scanner" - rahulkmr1502/Network-Recon-Concept-leanring