Conversor de câmbio desenvolvido para fins de estudo em AppSec e Arquitetura Front-end. Implementa mitigação de XSS, CSP restrita, Rate Limiting no cliente (Debounce) e segregação estrita de assets...

PoC funcional de CVE-2026-52715 (GeoLeak): SQLi no autenticada en GEO my WordPress <= 4.5.5 via swlatlng/nelatlng. Laboratorio Docker + exploit time-based/boolean-based + exfiltracion sin co...

Malicious PDF files recently considered one of the most dangerous threats to the system security. The flexible code-bearing vector of the PDF format enables to attacker to carry out malicious code ...

Burp Suite Community Edition extension providing a powerful HTTP traffic search feature. Search captured requests and responses using keywords or regex, with filters, match highlighting, snippets, ...

Burp Suite extension: loopback MCP/HTTP API so agents can drive live Burp (scope, history, send, scanner, collaborator). - SquidSec/SquidSec_BurpAIBridge

POC tool for ResetNightmare (CVE-2026-27912). Contribute to Semperis-Community/ResetNightmare development by creating an account on GitHub.

Proof of Concept (PoC) for CVE-2026-64638, a reflected XSS in WordPress Core < 7.0.3. - zahidec0de/CVE-2026-12345-poc

Reglas YARA para detección de malware, desarrolladas a partir de análisis de muestras reales. - raulsineiro/malware-yara-rules

CVE-2026-8452 PreAuth RCE. Contribute to watchtowrlabs/watchTowr-vs-Citrix-Netscaler-PreAuth-RCE-CVE-2026-8452 development by creating an account on GitHub.

es-chromium: a Chromium build that tracks attacker-controlled data through V8 and Blink and reports DOM-XSS as a flow, not a guess. The browser agent behind EyalSec. - EyalSec/es-chromium

Intentionally vulnerable single-page dashboard demonstrating es-chromium DOM-XSS taint tracking - 21 flows across 8 sources and 18 sinks, each reachable from one URL. Demo target only. - EyalSec/vu...

A lightweight Node.js vulnerability and security configuration scanner. - Pexel-sibi/JARVIS-vulnerability-scanner

A Python-based network vulnerability scanner that discovers active devices, scans TCP ports, detects services and banners, performs rule-based risk analysis, and generates security reports. - aloks...

Contribute to SANR01/CVE-2021-41773-Exploit-Lab development by creating an account on GitHub.

A cybersecurity lab demonstration illustrating how an insecure file upload function in a web application can be exploited using **Burp Suite to achieve Remote Code Execution (RCE) and exfiltrate se...

夜航 · works —— 双非计算机学生的网安作品仓公开镜像（Bash → Linux → 网络 → Web → 漏洞复现 → writeup） - pionxe/works

Browser capability for DeepSeek Harness: headed Edge/Playwright provider, SSRF-safe navigation, a11y-ref clicking, permission gate with auto-remember, gated evaluate - xylt369/dsh-browser

CVE-2026-54433 Roundcube plain-text email stored XSS PoC - aramosf/CVE-2026-54433