Tools

az0x7/vulnerability-checklist

Curated collection of web and API vulnerability checklists covering XSS, SQLi, CSRF, IDOR, authentication bypass, file upload, and bug bounty testing…

naimkowshik/lbfh

About All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers

0xblackash/cve-2026-111497

Advisory and proof-of-concept toolkit for CVE-2026-111497 (Node2Shell), a Brotli heap overflow in Node.js, with trigger scripts, version checker, and…

lzh0082-cloud/code-detection

Replication package studying how LLM vulnerability auditors defer to static-analysis evidence, with a tree-sitter C/C++ front end, controlled…

horkimhab/cve-2026-109618-619

Proof-of-concept code for CVE-2026-109618 and CVE-2026-109619 (php2shell bypass), packaged for authorized lab reproduction and vulnerability research.

laremontada12/cve-2026-39987-marimo-preauth-rce

CVE-2026-39987 Marimo Pre-auth RCE research, Docker lab reproduction, root cause analysis, and patch validation.

ahmadhassan-bted/silentsniffer

A professional, high-fidelity de-anonymization and vulnerability diagnostic framework. Features a zero-coupling modular architecture for…

oscerd/cve-2026-80344

Runnable proof-of-concept reproducer for CVE-2026-80344 in Apache Camel camel-as2, demonstrating asynchronous MDN SSRF and credential disclosure with…

horkimhab/cve-2026

Educational collection of CVE proof-of-concept resources and vulnerability research material for authorized lab testing, defensive study, and secure…

githubsecuritylab/seclab-taskflow-agent

MCP-enabled multi-agent framework for declarative YAML-driven agentic workflows, used for AI-assisted code auditing, vulnerability triage, and…

0xblackash/cve-2026-21589

Technical analysis and detection guidance for CVE-2026-21589, a pre-auth path traversal arbitrary file access flaw in Atlassian Data Center products.

horkimhab/cve-2026-59265

Proof-of-concept and research material for CVE-2026-59265, a LibreOffice and OpenOffice vulnerability, intended for authorized lab testing and…

horkimhab/cve-2026-63277

Educational proof-of-concept repository for CVE-2026-63277, providing vulnerability research material and lab-safe testing guidance for authorized…

horkimhab/cve-2026-96940

Proof-of-concept and educational research repository for CVE-2026-96940, providing vulnerability details and lab-safe testing guidance for authorized…

0xblackash/cve-2026-63292

Documents CVE-2026-63292, a stack-based buffer overflow in Apache mod_vhost_alias, with affected versions, safe version and configuration checks, and…

0xblackash/cve-2026-73570

Advisory and detection guidance for CVE-2026-73570, an unauthenticated OS command injection in Zimbra SNMP notification processing leading to remote…

horkimhab/cve-2026-10817

Educational security research repository for CVE-2026-10817, providing proof-of-concept material and lab guidance for authorized vulnerability…