690 matches found
primilinary-exploit-searching-dork
primilinary-exploit-searching-dork This file contains an exten...
Towards a Blockchain-Based CI/CD Framework to Enhance Security in Cloud Environments
Security is becoming a pivotal point in cloud platforms. Several divisions, such as business organisations, health care, government, etc., have experienced cyber-attacks on their infrastructures. This research focuses on security issues within Continuous Integration and Deployment CI/CD pipelines...
EUVD-2025-34502
The XStore theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 9.5.4 via theetajaxrequiredpluginspopup function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to include and execute arbitrary .php files on t...
Web-Application-Security-Testing
Web Application Security Testing ā DVWA Lab End-to-end web ap...
Exploit for Improper Authorization in Vercel Next.Js
CVEs ā Exploits/CVE Identifiers Repository A collection of pr...
Exploit for Use After Free in Redis
CVE-2025-49844 RediShell - Lab Environment A practical lab...
EUVD-2006-2094
Malware in sbrugna...
EUVD-2017-2250
Malware in sbrugna...
Remote-Local-Exploitation-Lab-
š Remote & Local Exploitation Lab š Objective Exploit a vu...
EUVD-2024-2358
Malicious code in bioql PyPI...
EUVD-2025-4563
Malicious code in bioql PyPI...
pentest-automation-suite
Penetration Testing Automation Tools š“ Automated Penetratio...
STAF: Leveraging LLMs for Automated Attack Tree-Based Security Test Generation
In modern automotive development, security testing is critical for safeguarding systems against increasingly advanced threats. Attack trees are widely used to systematically represent potential attack vectors, but generating comprehensive test cases from these trees remains a labor-intensive,...
xss.yaml
It is an offensive tool for web application security testing. Th...
Janusec-Application-Gateway
It is an offensive tool for web application security testing. The repository contains a tool for testing web application security, specifically for identifying vulnerabilities in web applications. The tool is designed to test for various types of vulnerabilities, including SQL injection, cross-si...
disable_eval
This is a Ruby gem called "disableeval" that provides a method to protect against eval-related security vulnerabilities. The gem is designed to prevent remote code execution RCE attacks by disabling the eval method and its variants. The gem provides two main components: 1. A Rack middleware that...
marshalsec
It is an offensive tool for Java deserialization vulnerabilities. The repository contains a Java tool called "marshalsec" that exploits Java object deserialization vulnerabilities, allowing for remote code execution. The tool includes payload generators for various Java serialization libraries,...
IoTFuzzSentry: a Protocol Guided Mutation Based Fuzzer for Automatic Vulnerability Testing in Commercial IoT Devices
Protocol fuzzing is a scalable and cost-effective technique for identifying security vulnerabilities in deployed Internet of Things devices. During their operational phase, IoT devices often run lightweight servers to handle user interactions, such as video streaming or image capture in smart...
Empirical Security Analysis of Software-Based Fault Isolation through Controlled Fault Injection
We use browsers daily to access all sorts of information. Because browsers routinely process scripts, media, and executable code from unknown sources, they form a critical security boundary between users and adversaries. A common attack vector is JavaScript, which exposes a large attack surface d...
payloadsallthethings
This is an offensive tool for AWS exploitation. The repository contains a collection of tools and scripts for testing the security of Amazon Web Services AWS environments. The tools include: Pacu: an AWS exploitation framework designed for testing the security of AWS environments Bucket Finder: a...