Tools

az0x7/vulnerability-checklist

Curated collection of web and API vulnerability checklists covering XSS, SQLi, CSRF, IDOR, authentication bypass, file upload, and bug bounty testing…

d4t4s3c/offensivereverseshellcheatsheet

Curated cheat sheet of reverse shell payloads in Bash, Netcat, PHP, PowerShell, Python, Perl, Ruby, and msfvenom, plus webshells, log poisoning, and…

ilias1988/hacking-cheatsheets

A comprehensive collection of penetration testing cheatsheets, guides, and tools.

zishanadthandar/pentest

Jekyll-based pentesting knowledge base with methodology guides, cheatsheets, tool indexes, certification roadmaps, and curated practice lab and CTF…

domssilva/vulnsearch

A deep look at some recon methodologies and web-application vulnerabilities of my interest where I will merge all my notes gathered from books,…

dev-angelist/ejptv2-notes

eLearnSecurity Junior Penetration Tester (eJPT) v2 Notes

proviesec/xss-payload-list

Curated collection of cross-site scripting payloads, polyglots, and injection test rules for web application penetration testing and bug bounty…

ardakocadoru/xss-cheatsheet

Comprehensive XSS reference covering reflected, stored, DOM and blind payloads, filter bypass, WAF evasion, CSP bypass, mXSS, and real-world CVE case…

4rdr/proofs

Collection of CVE findings, proof-of-concept references, and vulnerability research notes, including ExploitDB entries and credited security…

horkimhab/cve-2026-wordpress

Educational CVE proof-of-concept collection targeting WordPress vulnerabilities, with setup scripts and lab guidance for authorized security research…

strik3r0x1/vulns

Collection of public proof-of-concept exploits for multiple CVEs, providing vulnerability demonstration code and references for security research and…

arpsyndicate/vedas-signatures

VEDAS-Driven Autonomous Generation + Community Contributions of Suricata & Nuclei Rules for over 15k CVEs

portswigger/xss-cheatsheet-data

Community-contributed JSON dataset of XSS payload vectors powering the PortSwigger XSS cheat sheet, with browser support and interaction metadata.

viralmaniar/vulnvault

Developer-focused knowledge base of application security vulnerabilities with insecure vs secure code examples, prevention guidance, and OWASP/CWE…

carlosalbertotuma/advisory

Public security advisories and PoCs for vulnerabilities discovered in open-source web software, with root-cause analysis, CVE references,…

cylock11/cve-list

A collection of CVE exploits, including Python PoCs and README files with instructions for reproducing and exploiting each vulnerability.

leox48/cve-2026-1769-writeup

Public write-up and disclosure timeline for CVE-2026-1769 (Stored XSS in Xerox CentreWare Web)

prince325/cve-2026-93659-writeup

Stored XSS in Concrete CMS Community Store leads to admin dashboard takeover