CVE-2026-18366: Events Manager < 7.4.1 — Unauthenticated Privilege Escalation to Administrator. Write-up and proof-of-concept (poc7.py). - ghostpels/CVE-2026-18366

Fileless shellcode dropper in C++ using WinINet API. Downloads and executes shellcode in-memory without touching disk. Educational purposes only. - Segaotava/havoc-fileless-dropper

The project studies how antivirus engines detect shellcode and develops obfuscation techniques to evade them, then measures how successfully these modified payloads bypass detection in an isolated ...

A modular Web Application Vulnerability Scanner built with Python. Features HTTP header analysis, directory fuzzing, custom payload injection for SQLi/XSS detection, and automated reporting. Design...

Autogenerate YARA rules from collections of similar files - jhumble/sigmaker

Proof-of-concept for CVE-2026-18315 (TrueBooker WordPress Plugin): Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover - nastar-id/CVE-2026-18315-PoC

a walkthrough of all six levels of flaws.cloud — aws s3, ebs, imds and iam misconfigurations, and how they chain into a full account compromise - Elnimo-00/cloud-infra-pentest

Web access skills for Prime Agent: multi-backend search (Gemini grounding, Tavily, Brave, Serper, Exa, SearXNG, DuckDuckGo) and SSRF-guarded page fetching with HTML-to-markdown and PDF extraction -...

Basic web vulnerability scanner for educational purposes - CyberPhantom87/web-vuln-scanner-

This tool would inject 3000 lines of reflected cross site scripting payloads and find a way to at least get 1 working and has built in coded ai support for assistance - Micatob/Xss-Scanner

Contribute to jashwanth0726/web-vulnerability-scanner development by creating an account on GitHub.

Contribute to Jaybee124/YARA-malware-Lab development by creating an account on GitHub.

A Python-based mini vulnerability scanner for authorized network and web security assessments. - uzair-hidayath-khan/Mini-Vulnerability-Scanner

AI-powered web application vulnerability scanner: crawl, 21-category rule detection, AI false-positive reduction, PDF/Markdown reports - illupak/ai-vuln-scanner

Contribute to K0NGR3SS/cve-signal development by creating an account on GitHub.

Hybrid static + dynamic web vulnerability scanner - SQLi, XSS, CMDi, path traversal, IDOR, misconfig. CLI + Streamlit. Master's thesis project. - moadh704/webvulnscanner

Burp Suite Montoya extension + Python CLI for automated proxy traffic coloring, history querying, and Repeater staging - Narmi45/BurpBridge

Nuclei POC，每日更新. Contribute to ahisec/nuclei_poc_1 development by creating an account on GitHub.

AI-powered Burp Suite extension for automated web app penetration testing. DeepSeek-driven payload generation, vulnerability detection (SQLi, XSS, SSRF, SSTI, XXE, RCE), scope-aware traffic capture...

Contribute to alsaeyd-alakhras/yara.alhaddad development by creating an account on GitHub.