MassAcre - masscan --banners: Remote Infinite-Loop DoS via Crafted TLS Certificate Record (0day at repo creation, Aug 14 2026) - portbuster1337/MassAcre

Web Vulnerability Scanner. Contribute to adelkamell/Web-Scanner development by creating an account on GitHub.

Scanner de Vulnerabilidades Multi-Tipo em Rust (15 tipos, WAF Bypass, API REST, Race Conditions e mais) - 5n4vc4smh8-pixel/vuln-scanner

Contribute to Giangdurian/zimbra-zmswatchd-rce-lab development by creating an account on GitHub.

Conversor de câmbio desenvolvido para fins de estudo em AppSec e Arquitetura Front-end. Implementa mitigação de XSS, CSP restrita, Rate Limiting no cliente (Debounce) e segregação estrita de assets...

PoC funcional de CVE-2026-52715 (GeoLeak): SQLi no autenticada en GEO my WordPress <= 4.5.5 via swlatlng/nelatlng. Laboratorio Docker + exploit time-based/boolean-based + exfiltracion sin co...

Malicious PDF files recently considered one of the most dangerous threats to the system security. The flexible code-bearing vector of the PDF format enables to attacker to carry out malicious code ...

Burp Suite Community Edition extension providing a powerful HTTP traffic search feature. Search captured requests and responses using keywords or regex, with filters, match highlighting, snippets, ...

Burp Suite extension: loopback MCP/HTTP API so agents can drive live Burp (scope, history, send, scanner, collaborator). - SquidSec/SquidSec_BurpAIBridge

POC tool for ResetNightmare (CVE-2026-27912). Contribute to Semperis-Community/ResetNightmare development by creating an account on GitHub.

Proof of Concept (PoC) for CVE-2026-64638, a reflected XSS in WordPress Core < 7.0.3. - zahidec0de/CVE-2026-12345-poc

Reglas YARA para detección de malware, desarrolladas a partir de análisis de muestras reales. - raulsineiro/malware-yara-rules

CVE-2026-8452 PreAuth RCE. Contribute to watchtowrlabs/watchTowr-vs-Citrix-Netscaler-PreAuth-RCE-CVE-2026-8452 development by creating an account on GitHub.

es-chromium: a Chromium build that tracks attacker-controlled data through V8 and Blink and reports DOM-XSS as a flow, not a guess. The browser agent behind EyalSec. - EyalSec/es-chromium

Intentionally vulnerable single-page dashboard demonstrating es-chromium DOM-XSS taint tracking - 21 flows across 8 sources and 18 sinks, each reachable from one URL. Demo target only. - EyalSec/vu...

A lightweight Node.js vulnerability and security configuration scanner. - Pexel-sibi/JARVIS-vulnerability-scanner

A Python-based network vulnerability scanner that discovers active devices, scans TCP ports, detects services and banners, performs rule-based risk analysis, and generates security reports. - aloks...

Contribute to SANR01/CVE-2021-41773-Exploit-Lab development by creating an account on GitHub.

A cybersecurity lab demonstration illustrating how an insecure file upload function in a web application can be exploited using **Burp Suite to achieve Remote Code Execution (RCE) and exfiltrate se...