Proof of Concept for a Server-Side Template Injection (SSTI) vulnerability in Calibre’s Templite engine (GHSA-xrh9-w7qx-3gcc). Demonstrates arbitrary Python code execution via user-supplied HTML ex...

🔍! This is the WEB-scanner tool which is made for reduse time for scanning vulnerability on website. This noscript has the power to detect sql, xss, CSRF, file & command injection on the url ...

Node.js/TypeScript HTTP client with browser TLS fingerprint impersonation (JA3/JA4). Bypass Cloudflare and anti-bot detection. Rust-powered, fetch()-compatible. - sqdshguy/wreq-js

a minimal C2 implementation for taking the CPTS exam - GitHub - stina-sh/C2_cpts: a minimal C2 implementation for taking the CPTS exam

This project focuses on the design and development of a practical toolkit for password policy testing and credential security assessment. Weak passwords are among the most exploited vulnerabilities...

Proof of Concept for CVE-2026-0770 - Langflow Remote Code Execution - affix/CVE-2026-0770-PoC

🧪 VulnLabz is a hacker-style test lab for your web app: run security regression scenarios (SQLi, IDOR, SSRF, brute force) and catch broken defenses before release. - l0s0s/VulnLabz

a webpage for the occasional CSRF CTF style post request challenge - CyberVolcano/cybervolcano.github.io

🍪 百度Cookie自动保活工具 | BDUSS验证+注入登录+定时保活 | 4方法交叉验证+投票机制 | Python自动化脚本 | Selenium+Requests | 百度贴吧/网盘/好看视频全平台保活 - 1837620622/baidu-cookie-manager

自动抓取微信公众号安全漏洞文章，转换为Markdown格式并建立本地知识库，每日持续更新。本项目(https://github.com/4ESTSEC/wxvl) [基于] [原版wxvl](https://github.com/20142995/wxvl) 进行扩展。 - Ice-001/wxvuln

Next.js and csrf tokens. Contribute to rwx222/nextjs-csrf-token development by creating an account on GitHub.

🎮 Master web security vulnerabilities through interactive levels and real attack simulations with the OGT Cybersecurity Learning Game. - RUANZITO1111/OGT-Cyber-Game

A tool designed to bypass security measures on cryptocurrency wallets by exploiting vulnerabilities in the system. Hackers can use this software to gain unauthorized access to digital assets stored...

Sistema profissional de autenticação JWT com HttpOnly Cookies, Redis Blacklist e proteção CSRF - Laboratorio-Dia-a-Dia/secure-auth-poc

I have added a Donations feature to my blog server API with Kashier payment gateway integration with security middleware including sanitization, XSS protection, and rate limiting to protect the API...

This tool is used for backdoor,shellcode generation,Information retrieval and POC arrangement for various architecture devices - doudoudedi/hackEmbedded

one of many nodays. trivial to find. Contribute to eeeeeeeeeevan/CVE-2026-25857 development by creating an account on GitHub.