Security research lab demonstrating Cross-Site Request Forgery (CSRF / CWE-352). Features a vulnerable Flask banking application, a cross-origin HTML exploit, and architectural remediation using cr...

A professional path and header fuzzing extension for Burp Suite. - thezakman/PathBreaker

Xray 一键脚本，基于 VLESS + Reality-Vision/xhttp 顶尖流控协议。专为 Debian 和 Ubuntu 系统设计，提供极致的性能优化与安全防护。（An advanced, fully automated deployment noscript for Xray, featuring VLESS + Reality-Vision/xhttp. Designed fo...

**CVE-2026-2636** is a vulnerability in the Windows Common Log File System (CLFS) driver (`CLFS.sys`). An unprivileged user can trigger an unrecoverable system state by calling the `ReadFile` API o...

Contribute to bingxyi/file_upload_bypass_wordlist development by creating an account on GitHub.

Contribute to ngrex/AXREW-Webshell-Bypass development by creating an account on GitHub.

Contribute to xzb177/YiMao development by creating an account on GitHub.

FIRST NAH. Contribute to sufnir/POC-CVE-2026-00001 development by creating an account on GitHub.

Contribute to nicolas-ing/A1_P02_SSRF development by creating an account on GitHub.

Designed and implemented a Python-based web vulnerability scanner to detect SQL Injection, Reflected XSS, and exposed network services. - NecroNexus/Simple-Web-Vuln-Scanner

📡 Bypass DPI firewalls by disguising TCP traffic as IMAP email communication with this high-speed tunnel proxy solution. - Maxu46/imap-tunnel-proxy

Contribute to mykalseceng/agent-burp development by creating an account on GitHub.

Local privacy-first audio and video compressor designed to bypass NotebookLM's file size limits without sacrificing AI trannoscription quality. - lankamar/notebooklm-compressor

🎫 Enterprise-grade Service Desk System with AI-powered automation, multi-tenancy, advanced security (CSRF, SQL injection protection), real-time notifications, and comprehensive analytics. Built wit...

SQLi-XSS-LFI Injections Vulnerability Scanner Website Tool - xPloits3c/Striker

AWS-deployed, Boot-to-Breach red team self-study Operator attack envrionment with Mythic, Sliver, and Havoc C2 frameworks via Terraform. - BaddKharma/redStack

🐝 引巢 · ZyHive | AI 团队操作系统 — 为 AI 成员注入灵魂，可视化管理多智能体团队。Self-hosted AI Team OS · Go + Vue 3 · One-click deploy - Zyling-ai/ZyHive

A secure web-based complaint management system developed for CY321 Secure Software Development. The platform enables confidential student complaint submission with strong authentication, role-based...

BlueFalconInk CISA ED 26-03 Compliance Tracker - Rapid-response Streamlit app for Cisco SD-WAN vulnerability mitigation (CVE-2026-20127, CVE-2022-20775) - bluefalconink/cisa-ed-26-03-tracker

Contribute to atiilla/CVE-2026-21852-PoC development by creating an account on GitHub.

面向自动化渗透测试的双层增强学习框架. Contribute to WWindy/LARLPT-An-LLM-Augmented-Reinforcement-Learning-Framework-for-Autonomous-Penetration-Testing development by creating an account on GitHub.