Windows 本地环境与凭据管理器（Python + PySide6 GUI）：API 凭据加密管理（Argon2id + AES-256-GCM）+ 环境变量可视化编辑（Path 编辑器/多版本切换/UAC 提权）。纯本地运行，全程脱敏。MIT 风格开源示例。 - SunshineR04/credmgr-public

Upload a codebase, and the AI traces how user input flows through the code to find security vulnerabilities. It checks each step for proper sanitization and suggests a PoC and fix. - blacksinisterx...

XSSRecon automates the process of testing URL parameters for reflection of a test payload rix4uni and further checks how special characters are handled (allowed, blocked, or converted). - rix4uni/x...

Python-based Web Vulnerability Scanner for detecting Reflected XSS vulnerabilities in a controlled DVWA environment. Developed as part of a Cybersecurity Internship. - rajputisha058-ship-it/Web_Vul...

Security research and authorized testing PoC for a Metabase zero-day vulnerability. Intended for defensive research, detection development, and use in controlled lab environments. - codeb0ssx/Metab...

Contribute to n0r1k4zu/burp-sf-aura development by creating an account on GitHub.

Pre-authentication RCE in Cisco CUCM 15.x via Apache Axis JNDI injection — independent chain, survives Silent;Call patches - 0xReadingSteiner/Dead-Dial

Contribute to orfloresti/devtalks-xss development by creating an account on GitHub.

A secure Task Manager REST API with JWT + Google OAuth (Passport.js) auth, HTTP-only cookie sessions, owner-scoped task routes, helmet/xss-clean/mongo-sanitize hardening, rate limiting, and central...

CVE-2026-23744 is an unauthenticated command injection in MCPJam Inspector ≤1.4.2 via /api/mcp/connect. This POC exploits it by sending a crafted JSON payload to execute arbitrary commands, grantin...

Web vulnerability scanner — XSS, SQLi, CRLF, path traversal, command injection, open redirect, security headers - devkroz/vuln-scanner

CVE-2026-9198利用代码. Contribute to CuteeCat/CVE-2026-9198 development by creating an account on GitHub.

Single-node Wazuh 4.12.0 stack deployed on the management segment of a multi-VLAN home SOC lab, with agents enrolled on a Windows domain controller and workstation, plus a custom MITRE ATT&...

This repository is for Indicators of Compromise (IOCs) from Zscaler ThreatLabz public reports - ThreatLabz/iocs

DFIR and Malware Analysis Lab - FlareVM, REMnux, Ghidra, CAPA, YARA, Volatility 3 - ronankongala/dfir-malware-lab

独立 APK：CVE-2026-43499 GhostLock 提权 + Shizuku shell 身份执行 - oopnv70-lab/ghostlock-apk

WP2Shell is a powerful and modular exploit framework that combines two critical WordPress vulnerabilities (CVE-2026-63030 and CVE-2026-60137) to achieve complete compromise of a target site without...

XSS2Shell ULTIMATE v3.0 is a powerful exploitation tool that chains Cross-Site Scripting (XSS) vulnerabilities in WordPress to achieve Remote Code Execution (RCE). This tool exploits CVE-2026-64638...

Exploit for pgAdmin4 Remote Code Execution (RCE) vulnerability affecting versions 8.10 to 9.1. - g0d150ne/CVE-2025-2945

AI-powered PHP vulnerability scanner and static security analyzer for detecting SQL injection, XSS, RCE, malware, backdoors, secrets, and insecure code. - BangPiyus/php-ai-security-scanner