Reflected XSS via price_from & price_to Filter Parameters in PhocaCart - toanln-cov/CVE-2026-76565

Stored XSS via User-Agent in Admin Order View in PhocaCart - toanln-cov/CVE-2026-76564

PoC for CVE-2026-58455: Dockwatch <=0.6.567 unauthenticated RCE. Stdlib-only Python. - Boreas37/CVE-2026-58455-PoC

JCEzploit is a powerful, fully-automated RCE exploit for Joomla JCE (CVE-2026-48907) featuring interactive shell, batch command execution, file download capability, and proxy support. Built with Py...

Burp Suite extension for authorisation testing: replays requests as multiple identities and unauthenticated, with scripted session maintenance for short-lived logins - OmniCyber-Security/burp-auth-...

本项目是一个面向 AI Agent 的红蓝对抗安全评测平台，用于模拟红队攻击、目标 Agent 执行、蓝队检测拦截、评估统计和审计追踪的完整闭环。 - daaddsa/AI-Agent-online-versus-platform-rvb

Web Güvenlik Açığı Tarayıcı | Web Vulnerability Scanner - erensogutlu/feeble

Web-based vulnerability scanner for identifying common security issues and misconfigurations in websites. Built for authorized security testing and educational purposes. - cyberalpha004/vulnerabili...

可疑URL取证工作流：威胁情报查询、三设备画像抓包、JS反混淆、APK静态分析（evidence-first, 不执行payload） - shedan-hue/suspicious-url-forensics

YARA based Malware Analysis and Detection System. Contribute to amruta01-arch/YARA-Malware-Detection development by creating an account on GitHub.

Contribute to philipmagar/vulnerability-scanner development by creating an account on GitHub.

Educational Windows Internals & Red Team lab demonstrating local Module Stomping execution using WinExec. Advanced defense evasion and code execution research implementation leveraging ima...

A fully automated exploit script for **CVE-2025-69212**, a command injection vulnerability in OpenSTAManager. This script authenticates with admin credentials, deploys a malicious PHP web shell via...

On-Demand Web Vulnerability Scanner. Contribute to Kamini2-6/VulnScan-Lite development by creating an account on GitHub.

A small, intentionally vulnerable Flask e-commerce app built to demonstrate SQL injection, stored XSS, IDOR, and weak authentication. - Aakif-Kohari/vulnmart

Defensive security pipeline — SSH/HTTP honeypot, YARA malware detection rules, and static malware analysis, connected end-to-end. Educational/isolated-lab use only. - vikkuinfosec-lang/threat-detec...

🛡️ Explainable AI Malware Analysis Platform with PE Static Analysis, YARA Engine, SHAP Explainability & Real-Time Dashboard - intrance7/Zeravynex

At Secure Dev Labs, I executed end-to-end ethical hacking workflows, covering subdomain reconnaissance, DVWA/SQLmap-based SQLi and XSS exploitation, and full system takeover via insecure Java RMI r...

plugin para detecção e defesa de ataques XSS baseado em DOM - agsise/SAPlugin