dinosn/cve-2026-87902-wordpress-lfi-labReproduction lab + URL-list scanner + PoC for CVE-2026-87902 / GHSA-7hp8-65ch-5whp — WordPress get_page_template() unauthenticated LFI to conditional…
danreis20/pentest-lab-metasploitable2Laboratório de pentest em rede isolada: enumeração com nmap/nikto e exploração manual do Metasploitable2 (backdoor vsFTPd CVE-2011-2523, bindshell)…
yeee3642/edu-reconAuthorized education-sector recon & triage orchestrator (nmap/dirsearch/sqlmap/hydra + CVE-2024-4577, secret/API-key leak, XSS, wp2shell) with a web…
cerberusmrxi/apache-lua-buffer-overflow-exploit-cve-2021-44790Apache HTTP Server 2.4.x mod_lua Buffer Overflow (CVE-2021-44790) - Advanced exploitation framework with fingerprinting, multi-stage scanning, plugin…
torchiachristian/vulnscanScanner di vulnerabilità web in Python: SQL injection, XSS , path traversal, security headers. Crawler, dashboard Flask, report in un PDF
cyber-note/cve-2026-34835-black-box-analysisA black-box (DAST) security analysis of CVE-2026-34835 focusing on external validation methodology, observable behavior, security impact, and…
sanupl/vehicle-service-management-system-user-list-stored-cross-site-scripting-xssCVE-2021-46073 - A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the User List…
0xuho/cve-2024-2997The tool helps in quickly identifying vulnerabilities by examining a comprehensive list of potential paths on a website, making it useful for…
security-phoenix-demo/react2shell-scanner-rce-react-next-cve-2025-55182-cve-2025-66478Scanner for CVE-2025-55182 (React) and CVE-2025-66478 (Next.js) - Track and remediate a critical React Server Components (RSC) / Flight protocol…
shiva108/waesCPH:SEC WAES: Web Auto Enum & Scanner - Auto enums website(s) and dumps files as result
ronin-rb/roninRonin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of…
waburig/open-worldwide-application-security-project-owasp-Automated Web Vulnerability Assessment of DVWA using OWASP ZAP to identify and analyze critical security flaws like Remote Code Execution…
bwasp/bwaspBoB Web Application Security Project
shivanshkuntal/exploitation-of-a-remote-code-execution-vulnerability--cve-2024-7954-Exploitation of a Remote Code Execution vulnerability- (CVE-2024-7954)
l4rm4nd/cve-2025-55182Docker-based lab for detecting and exploiting CVE-2025-55182 (React2Shell RCE) in Next.js/React Server Components, with pre-configured vulnerable…
veilvulp/rscscan-cve-2025-55182RscScan: Professional cross-platform vulnerability scanner for Next.js Server Actions (CVE-2025-55182). Detects critical RCE flaws with…
moisestapia/http-react2shellDetection of the React Server Actions Exploit vector – CVE-2025-55182 / CVE-2025-66478
xiaopeng-ye/react2shell-detectorA Chrome extension for detecting React2Shell vulnerabilities (CVE-2025-55182 & CVE-2025-66478) in web applications
