853 matches found
Exploit for CVE-2026-49952
Discuz-X5.0-Authentication-Bypass-Exploit-Framework Discuz! X5...
Exploit for Code Injection in Craftcms Craft_Cms
CVE-2025-32432 Craft CMS PoC Single-target proof-of-concept...
Exploit for Stack-based Buffer Overflow in Microsoft
🛡️ CVE-2026-41089-Netlogon-RCE - Analyze critical Windows serv...
DAST-Platform
🛡️ DAST Platform !Pythonhttps://img.shields.io/badge/Pytho...
zaproxy w2026-07-21
The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...
Exploit for CVE-2026-63030
WP2Shell Detector and Validation PoC !License: MIThttps:/...
agent-opfor v0.10.1
Open-source adversary emulation for AI agents, LLM apps, and MCP servers. Test your AI like a real attacker would — from your CLI, your IDE, or a browser extension that anyone on your team can use. Website · Docs · GitHub · Browser Extension · Discord OPFOR is short for Opposition Force — a...
FLOCK_CVE_SCANNER
FLOCKCVESCANNER Scan and exploit with permission Ov...
Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl_Firmware
HIKRAVEN 🛡️ Advanced Hikvision Security Assessmen...
clusterfuzz v2.34.0
ClusterFuzz ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software. Google uses ClusterFuzz to fuzz all Google products and as the fuzzing backend for OSS-Fuzz. ClusterFuzz provides many features which help seamlessly integrate fuzzing into a softwar...
Malicious code in better-tailwindcss (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 302c3b7766a431cefe81d41434fd4c5aae74aacec230488bd004eca18cbe8dff The package publishes under the name of the legitimate better-tailwindcss project but its package.json declares both a runtime and dev dependency on...
wp-cve-exploits
wp-cve-exploits Nuclei detection templates and validated PoC...
Exploit for Insecure Default Initialization of Resource in Apache Solr
CVE-2026-44825 Apache Solr Scanner This repository contains a...
Is Your AppSec Program Built to Close the OWASP Top 10 2025 Coverage Gap?
Key Takeaways Most AppSec programs treat API-layer coverage as a DAST extension, but BOLA, BFLA, and SSRF require authenticated multi-role testing that traditional scanners weren’t built to run at scale. Modern authentication flows OAuth2, JWT validation, MFA-protected sessions often fall outside...
OIBSIP_Cybersecurity_Task9
Task 9: SQL Injection Vulnerability Assessment using DVWA...
VulnClaw
🔍 VulnClaw - Automated Security Testing Using Artificial Intel...
The Red Agent POV: Exploiting Broken Object-Level Authorization in an Airline GraphQL API
Part 2: How the Red Agent bypassed backend resolvers to expose an entire airline booking database in fifteen minutes...
API Security Demystified: Which Tools Actually Protect Your APIs (And Where the Gaps Are)
Introduction Quick answer: No single tool secures an API. API security is a layered discipline. Secure-coding analyzers and SCA scanners catch code and dependency flaws; DAST tests running APIs; API gateways and IAM enforce authentication and rate limits; a WAF blocks known attack patterns; bot...