titus
praetorian-inc/titusHigh-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.
code-analysiscontainer-securitydevsecops+6
678
praetorian-inc/titusHigh-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.
six2dez/burp-ai-agentBurp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more
chrissec2014/amasty-chekout-poc-rcemy poc for CVE-2026-53787
overspace-labs/haeModular Burp Suite extension for fine-grained highlighting and extraction of sensitive data from HTTP and WebSocket traffic, enabling efficient…
sleeyax/burp-awesome-tlsBurp extension to evade TLS fingerprinting. Bypass WAF, spoof any browser.
r2qa/cve-2026-17544Exploit for CVE-2026-17544: PHP bcmath OOB write converted into memory-only RCE, bypassing disable_functions and open_basedir with a runtime…
teycir/burpapisecuritysuiteBurp Suite extension for API security testing with 15 attack types, 108+ payloads, intelligent fuzzing, BOLA/IDOR detection, AI integration, and…
portswigger/turbo-intruderHigh-speed Burp Suite extension for sending large volumes of HTTP requests with a custom stack, Python-based attack configuration, and advanced…
portswigger/param-minerBurp Suite extension that discovers hidden, unlinked parameters using advanced diffing and binary search, enabling detection of web cache poisoning…
portswigger/http-request-smugglerBurp Suite extension for automated detection and exploitation of HTTP request smuggling vulnerabilities, supporting HTTP/1.1 and HTTP/2-downgrade…
ilhomjonr/cve-2026-70376Advisory and Python PoC for Pluck CMS CSRF: fail-open Referer check plus double-extension upload enables webshell deployment and remote code…
murrez/cve-2026-65891CVE-2026-65891 PoC — Joomla Content Editor file rename vulnerability (auth required, fixed in JCE 2.20.2)
toanln-cov/cve-2026-66491The Joomla extension PhocaCommander is vulnerable to Path Traversal in the getSource function - CVSS 8.2
toanln-cov/cve-2026-66493The Joomla extension PhocaCommander is vulnerable to Path Traversal in delete, copy, move actions - CVSS 6.4
toanln-cov/cve-2026-66492The Joomla extension PhocaCommander is vulnerable to Path Traversal in the file upload action - CVSS 6.1
hunt-benito/e-is-for-exploit-cve-2026-17543-php-pgsql-sql-injection-backslash-breakoutPoC exploit for CVE-2026-17543: SQL injection in PHP ext/pgsql via backslash breakout, with data exfiltration and admin privilege-escalation payloads…
george0papasotiriou/cve-2026-4040-race-condition-in-file-upload-leading-to-rceReproduces CVE-2026-4040: Flask upload server with TOCTOU race condition and exploit script demonstrating arbitrary remote code execution.