wpscan
wpscanteam/wpscanWordPress security scanner that detects vulnerabilities, enumerates plugins/themes/users, and checks for weak passwords. Integrates with the WPScan…
reconnaissancevulnerability-scannersweb-vulnerability-scanners+3
9.7k
Penetration testing methodologies, frameworks, reporting, and automation tools.
wpscanteam/wpscanWordPress security scanner that detects vulnerabilities, enumerates plugins/themes/users, and checks for weak passwords. Integrates with the WPScan…
zaproxy/zaproxyOpen-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…
anirbala98/cve-2026-67206PoC exploit for Wolf CMS <= 0.8.3.1: authenticates to Admin, writes an arbitrary PHP file to /public via FileManagerController, and executes commands…
anirbala98/cve-2026-3576Proof of Concept exploit for CVE-2026-3576
xghst0/reconkgVulnerability triage with provenance. Resolves CVEs from locally built corpora (NVD/KEV/EPSS, ExploitDB, nmap script.db) and emits verification…
ottosulin/awesome-ai-securityA collection of awesome resources related AI security
commixproject/commixAutomated All-in-One OS Command Injection Exploitation Tool
0xterror/cve-2026-8181Exploit PoC for WordPress Burst Statistics authentication bypass allowing unauthenticated admin impersonation via crafted Authorization header.
carterperez-dev/cybersecurity-projectsBuilding 70 Projects ranging from beginner to advanced so anyone can — learn from, build upon, use as a reference, or even copy directly. Gamified…
zhaoxuya520/reverse-skillAI-powered skill router pack for reverse engineering, penetration testing, and security research. Routes AI agents to correct methodologies and…
pansyhebephrenic23/nimbuspwn-cve-2022-29799-29800Demonstrate local privilege escalation in networkd-dispatcher via CVE-2022-29799 and CVE-2022-29800 using this C proof of concept.
learningdisordercapital35/cve_2025_24257----not-mineDemonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read/write and panic analysis
geeoon/fault-injection-finderAutomatically find and execute fault injection attacks
tracyliving606/regpwnExploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions
hamzamalik3461/cve-2026-20841🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.
prime-radiant-inc/superpowers-evalsBehavioral eval lab (Quorum) for the superpowers project that drives real coding-agent CLIs (Claude, Codex, Gemini, Kimi, and more) through a QA…
keygraphhq/shannonShannon is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes…