Advanced React Server Components RCE scanner for CVE-2025-55182. Features: multi-stage fingerprinting, vulnerability verification, DNS exfiltration, interactive shell, payload obfuscation, and prof...

A modern, security-conscious package vulnerability scanner for the JavaScript ecosystem. Wraps npm/pnpm/yarn audit with exception management, multiple output formats, and fix availability reporting...

XSS2Shell (CVE-2026-64638) PoC — WordPress pre-auth XSS to RCE chain - Boreas37/CVE-2026-64638-PoC

A simple Python-based Vulnerability Scanner that scans common open ports, checks HTTP security headers, and generates a basic vulnerability report for educational purposes. - Mohanlila/Vulnerabilit...

PoC funcional de CVE-2026-64638 (XSS2Shell): cadena pre-auth XSS a RCE en WordPress Core. Laboratorio Docker + servidor atacante Python + análisis técnico y mitigación. - 686f6c61/POC-WP-XSS2Shell-...

Enterprise Hospital Management System (HMS) with patient records, appointments, EMR/EHR, billing, pharmacy, lab management, inventory, analytics, secure authentication, and a complete DevOps &a...

Guest-to-host KVM/x86 escape exploiting CVE-2026-64561, delivering a full PoC chain and analysis for security researchers. - aarif450/Zapscape

Exploit KVM/x86 guest-to-host escape CVE-2026-64561 with Zapscape, a proof-of-concept demonstrating hypervisor vulnerability. - aarif450/aarif450.github.io

蛙暴：一款指纹识别+联动批量登录+联动afrog poc(9000+). Contribute to keiokr/FrogBrute development by creating an account on GitHub.

Cerberus is an automated vulnerability scanner and security assessment platform featuring deep web crawling, CVE mapping, injection testing (XSS, SQLi, RCE), and professional PDF report generation....

Basic Web Vulnerability Scanner built using Python and Flask. - C0DeR-eng/SentinelScan

Basic CLI-based vulnerability scanner built with Python that checks common open ports, missing HTTP security headers, and exposed server information, while providing basic security recommendations....

weblogic弱口令爆破脚本，后续会一直更新，才最初版本. Contribute to Brave145142/weblogic- development by creating an account on GitHub.

SCTPhantom (CVE-2026-64564) SCTP ASCONF DEL-IP UAF LPE PoC (Debian 13 6.12.95) — community PoC mirror, MIT; for authorized security testing - HackSpeak/CVE-2026-64564

Reconstructing electron densities from X-ray solution scattering data using a Variational Autoencoder - LeoMonrroy266/XSSDense

picoclone CTF challenge: SSRF Safari (web · hard). Contribute to picoclone/ssrf-gateway development by creating an account on GitHub.

picoclone CTF challenge: Reflected XSS (web · easy) - picoclone/xss-reflected

picoclone CTF challenge: Stored XSS (web · medium) - picoclone/xss-stored

Burp Suite extension for HTTP verb tampering testing using Montoya API. - MeysamIO/Burp-Verb-Tamper

A comprehensive workshop aimed to equip participants with an in-depth understanding of modern Command and Control (C2) concepts, focusing on the open-source Empire C2 framework. - BC-SECURITY/Long-...