# keywords

title: iptv_api
link: https://github.com/alantang1977/iptv_api
pubDate: 2025-03-17 14:47:10
author: alantang1977
keyword: 未授权
language: Python
description:
🪅合法性提醒：使用的 IPTV 接口需符合《广播电视管理条例》等法律法规，避免爬取未经授权的版权内容，否则可能面临法律风险。AI通过抓取其它直播源集成一个总直播源，直播内容通过demo自定义进行运行爬取。每天自动更...


title: MTX-BROWERS
link: https://github.com/bcghjhgfdgsfj/MTX-BROWERS
pubDate: 2026-04-30 16:33:28
author: bcghjhgfdgsfj
keyword: 未授权
language: HTML
description:
MTX 纯无痕浏览器是一款基于 Electron 开发的轻量浏览器，主打简洁、稳定与隐私保护，兼顾日常浏览与轻量化使用需求。项目注重界面简洁易用、启动快速、占用资源低，同时支持基础网页浏览、隐私模式与自定义设置，拒绝多...


title: agent-authorization-tiering
link: https://github.com/Lee110110/agent-authorization-tiering
pubDate: 2026-04-29 14:05:07
author: Lee110110
keyword: 未授权
language: Python
description:
AAT（Agent Authorization Tiering）基于 Harness Engineering 定义了一套多维度、多层级的 Agent 授权框架。其核心原则是：> **Scaffold 信任 Agent；Harness 验证 Agent。**Scaffold 让 Agent 做事，Harness 在 Agent 做事之前验证。每个 Agent 的行为意图必须...


title: yanmie-sanyuan-operate
link: https://github.com/materuhanks/yanmie-sanyuan-operate
pubDate: 2026-04-26 23:02:48
author: materuhanks
keyword: 未授权
description:
# 湮灭三元运算体系 ## 项目说明 本项目为独立原创数理理论著作，完整陈述湮灭三元公理与运算体系。  研究范围： 1. 补全经典二元数学原生漏洞：排中律悖论、中间态缺失、罗素悖论、连续与离散对立、无穷理论矛盾、多体...


title: dify-plus
link: https://github.com/YFGaia/dify-plus
pubDate: 2024-12-09 19:53:32
author: YFGaia
keyword: 未授权
language: TypeScript
description:
Dify-Plus 是 Dify 的企业级增强版，集成了基于 gin-vue-admin 的管理中心，并针对企业场景进行了功能优化。 🚀  Dify-Plus = 管理中心 + Dify 二开 。 特别说明： 本项目为开源社区的二次开发成果，严格遵循 Dify 原项目的版权许可协议...


title: usb_manager
link: https://github.com/aWiseKing/usb_manager
pubDate: 2026-04-14 16:44:13
author: aWiseKing
keyword: 未授权
language: Python
description:
USB Manager 是一个基于 Python 的 Windows USB 设备管控辅助工具。它通过轮询监控系统中的 USB 设备拓扑树，自动识别并拦截未授权的 USB 设备接入。该工具允许用户通过 `config.json` 文件配置“受信任的 USB Hub（集线器）”，仅允许连...


title: maccms
link: https://github.com/zs7493/maccms
pubDate: 2026-04-08 17:35:19
author: zs7493
keyword: 未授权
description:
MaccmsX 是基于 ThinkPHP8.1 + Vue3 全新架构重构的内容管理系统，本项目仅面向编程爱好者提供技术学习与源码研究使用，严禁未经授权用于任何商业盈利场景，不承担任何法律责任，本仓库为独立二次重构开发版本。


title: penetration-team
link: https://github.com/prog-le/penetration-team
pubDate: 2026-04-08 07:38:28
author: prog-le
keyword: 未授权
description:
江湖渗透密卷・四绝客行 江湖规令 / 法纪昭告 本密卷所载之术，仅适用于已获目标宗门明确手谕授权的勘防试炼。未得授权擅闯他宗山门、探窥机密者，皆属江湖禁律所不容，轻则废功逐流，重则按律论罪。行事前务必核验授...


title: -VMware-Kali-Linux-WiFi-
link: https://github.com/sirfd12/-VMware-Kali-Linux-WiFi-
pubDate: 2026-04-06 22:59:16
author: sirfd12
keyword: 未授权
description:
本文档记录了在VMware环境中使用 Kali Linux 进行 WPA/WPA2 无线网络安全测试的完整流程。所有操作均在自己拥有的授权靶机环境中进行，仅用于学习研究。请勿在未经许可的网络和设备上使用。/This document records WPA/WPA2 security testing ...


title: -
link: https://github.com/ejndsnkdod/-
pubDate: 2026-04-06 14:18:43
author: ejndsnkdod
keyword: 未授权
language: Java
description:
Android相册一键清理工具。利用国产手机Legacy Storage兼容机制：Android 10以下设备通过requestLegacyExternalStorage直接获取全盘存储权限；Android 11及以上设备申请文件权限；若设备从低版本升级至Android 11以上，Legacy Storage兼容特性可能...


title: Cosmic-System-OS
link: https://github.com/a520b1314/Cosmic-System-OS
pubDate: 2026-04-04 13:18:36
author: a520b1314
keyword: 未授权
language: Python
description:
本项目 Cosmic-System-OS 为本人独立原创作品，以私有开发、开源发布形式完成著作权存证。所有代码、架构设计、进制理论及系统逻辑均归创作者「荻花宫宫主」所有，受著作权法保护。 现以开源形式公开，仅授权使用者学习、...


title: PocketTube
link: https://github.com/iVibudh/PocketTube
pubDate: 2026-04-29 14:49:39
author: iVibudh
keyword: POC
language: JavaScript
description:
A personal YouTube audio & video downloader for iOS and Android Built with React Native + Expo · Google Cloud Run · Firebase


title: pocket-flow
link: https://github.com/obiHenry/pocket-flow
pubDate: 2026-04-30 20:00:56
author: obiHenry
keyword: POC
language: Dart
description:
PocketFlow is a modern, local-first financial management application built with Flutter. Designed for precision and speed, it provides users with real-time financial health overviews, seamless multi-currency tracking (including USD/NGN), and offline-ready transaction management. Built using Clean A...


title: ALTAYSEC-CLOUD-BREACH-POC
link: https://github.com/V3nG4mxV1p3r/ALTAYSEC-CLOUD-BREACH-POC
pubDate: 2026-05-03 20:53:21
author: V3nG4mxV1p3r
keyword: POC
language: Shell
description:
A Dockerized, web-based SOC laboratory environment designed for analyzing AWS CloudTrail logs to detect initial access and IAM breaches.


title: pockgin
link: https://github.com/pockgin/pockgin
pubDate: 2026-04-15 13:45:36
author: pockgin
keyword: POC
language: JavaScript
description:
A static-first plugin registry for PocketMine-MP. No backend, no database - just Git, CI, and static files. Features


title: SqlKnife
link: https://github.com/Trimamkash/SqlKnife
pubDate: 2025-12-06 18:46:53
author: Trimamkash
keyword: RCE
language: C++
description:
Command-line post-exploitation toolkit for Microsoft SQL Server — enabling RCE, privilege escalation, persistence, and defense evasion via T-SQL.


title: CMD-Exploit-CVE-2024-RCE-AboRady-FUD-25765-Injection
link: https://github.com/Katirinata/CMD-Exploit-CVE-2024-RCE-AboRady-FUD-25765-Injection
pubDate: 2025-10-22 03:42:27
author: Katirinata
keyword: RCE
language: Visual Basic .NET
description:
Exploit development uses tools like exploitation frameworks and CVE databases. Cmd exploits, such as cmd fud or cmd exploit, enable silent execution while avoiding detection through proper setups.


title: catchclaw
link: https://github.com/Marathe-2/catchclaw
pubDate: 2024-07-03 22:10:57
author: Marathe-2
keyword: RCE
description:
Provide multi-platform AI agent security assessment with 78 exploit modules, ATT&CK mapping, and attack graph visualization.


title: cve-2025-66398
link: https://github.com/showy-headteacher114/cve-2025-66398
pubDate: 2026-03-23 17:09:21
author: showy-headteacher114
keyword: RCE
language: Go
description:
Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.


title: CVE-2026-25643
link: https://github.com/DyniePro/CVE-2026-25643
pubDate: 2026-03-08 04:23:08
author: DyniePro
keyword: RCE
language: Python
description:
Exploit Frigate NVR ≤0.16.3 to execute commands remotely by abusing a configuration flaw without needing shell access or output capture.


title: CVE-2025-69985
link: https://github.com/tianarsamm/CVE-2025-69985
pubDate: 2025-04-10 17:18:30
author: tianarsamm
keyword: RCE
language: Python
description:
Exploit CVE-2025-69985 to bypass authentication and execute remote commands on FUXA versions ≤ 1.2.8 via the /api/runscript endpoint.


title: fnos-rce-chain
link: https://github.com/epha4real/fnos-rce-chain
pubDate: 2025-05-11 19:56:24
author: epha4real
keyword: RCE
language: Python
description:
🚨 Exploit unauthorized remote code execution in Flycow OS <= 1.15 with a simplified attack chain analysis.


title: Terrminus-CVE-2026-2406
link: https://github.com/hyu164/Terrminus-CVE-2026-2406
pubDate: 2025-04-16 15:20:12
author: hyu164
keyword: RCE
language: Python
description:
🔍 Analyze and detect CVE-2026-2406 vulnerabilities in Telnet to enhance security and prevent unauthorized access with this professional research engine.


title: SourceCodester-Banking-CVE
link: https://github.com/dvjnelsonia/SourceCodester-Banking-CVE
pubDate: 2026-01-25 17:18:05
author: dvjnelsonia
keyword: RCE
language: Shell
description:
💥 Identify critical vulnerabilities in the SourceCodester Online Banking System v1.0, ensuring financial security and awareness of unpatched risks.


title: code-brick
link: https://github.com/nQrse/code-brick
pubDate: 2026-01-24 23:31:45
author: nQrse
keyword: RCE
language: TypeScript
description:
🧱 Manage reusable code templates effortlessly with Brick CLI. Eliminate repetitive tasks and streamline your project setup.


title: React2Shell
link: https://github.com/Asder10/React2Shell
pubDate: 2026-01-09 00:28:04
author: Asder10
keyword: RCE
language: Python
description:
🔍 Exploit CVE-2025-55182 vulnerabilities in Next.js and React with this efficient framework for rapid testing and assessment.


title: ParamX
link: https://github.com/viaC5real/ParamX
pubDate: 2026-01-08 23:01:33
author: viaC5real
keyword: RCE
language: JavaScript
description:
🔍 Extract and construct missing parameters from JavaScript files for effective unauthorized testing, enhancing your API engagement strategy.


title: CVE-2025-55182-Scanner
link: https://github.com/captain4554/CVE-2025-55182-Scanner
pubDate: 2026-01-02 09:28:57
author: captain4554
keyword: RCE
language: Python
description:
🛡️ Scan and assess vulnerabilities in Next.js/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.


title: react2shellexploitvisualized
link: https://github.com/imm17/react2shellexploitvisualized
pubDate: 2025-12-31 22:32:43
author: imm17
keyword: RCE
language: Svelte
description:
🔍 Visualize and understand the React2Shell vulnerability with a narrated walkthrough, detailing its impact and secure solutions for React Server Components.


title: CVE-2025-55182
link: https://github.com/ahmed-dev-op/CVE-2025-55182
pubDate: 2025-07-16 02:33:34
author: ahmed-dev-op
keyword: RCE
language: JavaScript
description:
⚠️ Explore a vulnerable environment to test security scanners against the CVE-2025-55182 RCE flaw in React Server Components and Next.js applications.


title: CVE-2025-55182-exp
link: https://github.com/iksanwkk/CVE-2025-55182-exp
pubDate: 2024-04-24 10:36:56
author: iksanwkk
keyword: RCE
language: Python
description:
🚨 Exploit CVE-2025-55182, a critical RCE vulnerability in React Server Components for Next.js apps; enables testing for prototype pollution risks.


title: CVE-2025-55182
link: https://github.com/wiixx44/CVE-2025-55182
pubDate: 2021-09-18 10:04:33
author: wiixx44
keyword: RCE
language: JavaScript
description:
🔍 Demonstrate CVE-2025-55182, a critical vulnerability in React Server Components allowing unauthenticated arbitrary code execution.


title: CVE-2025-55182
link: https://github.com/Mayca369/CVE-2025-55182
pubDate: 2025-06-07 00:34:46
author: Mayca369
keyword: RCE
language: Python
description:
🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.


title: spider
link: https://github.com/yuweiliang088/spider
pubDate: 2026-04-29 23:15:21
author: yuweiliang088
keyword: 反序列化
description:
一个基于强化学习与 LLM 的反反爬决策 Agent，专门解决传统硬编码策略在遇到 Cloudflare、Akamai 等复杂防护栈时完全失效的问题。该 Agent 将“成功获取目标数据”定义为最终目标，把代理选择、请求头组合、TLS 指纹、JavaScript 渲...


title: web-code
link: https://github.com/ljrrrr0108/web-code
pubDate: 2026-04-29 13:44:27
author: ljrrrr0108
keyword: 反序列化
language: JavaScript
description:
我构建了一个基于多 Agent 协作的小米智能家居意图理解与自动化系统。核心痛点：现有智能家居控制依赖用户逐设备精确操作，缺乏对模糊意图的深层理解能力，导致"我要睡了"这类自然指令无法被正确拆解执行。  系统架构包...


title: clipflow
link: https://github.com/linszjava/clipflow
pubDate: 2026-02-19 03:30:55
author: linszjava
keyword: 反序列化
language: HTML
description:
ClipFlow是一款面向高频信息收集与复用场景的桌面效率工具。它把“剪贴板历史 + 结构化片段管理 + 使用数据分析”整合到同一套工作流中：你可以快速保存文本与图片内容，按页面分类沉淀常用数据，并像表格一样进行行列编...


title: bigger-than-bigger
link: https://github.com/Bin4xin/bigger-than-bigger
pubDate: 2021-04-16 09:33:26
author: Bin4xin
keyword: 反序列化
language: Shell
description:
Expolit Lists. 相关集合💥💥💥 ;) 用友NC反序列化/ CTF/ Java Deserialization/Shiro Vulns/ CNVD or CVE Vulns/ Log4j2/ Hikvision-decrypter...✨✨✨


title: AgentMemshell
link: https://github.com/transvestic-velodrome9214/AgentMemshell
pubDate: 2026-05-02 08:27:33
author: transvestic-velodrome9214
keyword: webshell
description:
Inject memory shells into Java Tomcat processes across all JDK versions for command execution in environments without output.


title: Godzilla_bypass_webshell
link: https://github.com/erikturbolt/Godzilla_bypass_webshell
pubDate: 2026-03-15 17:44:56
author: erikturbolt
keyword: webshell
language: Python
description:
Bypass advanced webshell detection using AES encryption, data-flow breaks, and dynamic callbacks designed for stealthy PHP webshell operation.


title: ASPX_WebShell_COFFLoader
link: https://github.com/FFR31MMRDyukikaze/ASPX_WebShell_COFFLoader
pubDate: 2024-07-02 02:35:09
author: FFR31MMRDyukikaze
keyword: webshell
language: ASP.NET
description:
Execute Beacon Object Files on target servers via an ASPX web shell using a COFF loader for security testing and research purposes.


title: CloudShell
link: https://github.com/du-rezende/CloudShell
pubDate: 2021-06-26 13:19:02
author: du-rezende
keyword: webshell
language: Python
description:
Provide secure web access to remote SSH, SFTP, and FTP(S) sessions through a self-hosted, Docker-ready browser gateway without client software.


title: memory-shell-mcp
link: https://github.com/jk545490/memory-shell-mcp
pubDate: 2026-01-26 20:23:41
author: jk545490
keyword: webshell
language: Python
description:
🛠 Detect and remove Java memory shells with this tool, supporting local and SSH execution for effective process management and security analysis.


title: MatouWebshell
link: https://github.com/Richietoreck/MatouWebshell
pubDate: 2023-10-20 12:30:06
author: Richietoreck
keyword: webshell
description:
🛠 Manage and deploy webshell tools for Linux using Vue 3 and Python, featuring custom traffic formats for stealthy operation.


title: OrionPrime
link: https://github.com/mt801/OrionPrime
pubDate: 2026-01-03 19:54:13
author: mt801
keyword: webshell
language: Rust
description:
⚙️ Streamline edge-computation and predictive analytics in containerized microservices with OrionPrime for a highly available, self-healing solution.


title: No-one
link: https://github.com/gekonge/No-one
pubDate: 2025-09-27 18:15:16
author: gekonge
keyword: webshell
language: TypeScript
description:
🌐 Manage Java WebShells effortlessly with No-one, a modern tool for secure testing and deeper understanding of web attack scenarios.


title: Penetration_Testing_POC
link: https://github.com/Mr-xn/Penetration_Testing_POC
pubDate: 2019-07-24 11:37:55
author: Mr-xn
keyword: webshell
language: HTML
description:
渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms


title: CVE-2025-24367-Cacti-Exploit
link: https://github.com/dantedansh/CVE-2025-24367-Cacti-Exploit
pubDate: 2026-05-03 07:30:25
author: dantedansh
keyword: webshell
language: Python
description:
Script hecho para obtener una webshell gracias a la vulnerabilidad de cacti CVE-2025-24367 en su versión 1.2.28.


title: Webshell
link: https://github.com/sk26889/Webshell
pubDate: 2025-11-05 13:30:34
author: sk26889
keyword: webshell
language: Shell
description:
A webshell is a script uploaded to a web server that allows remote control over the server via a web interface. It is often used for malicious purposes but can also be studied for learning and defense.


title: MCSManager
link: https://github.com/MCSManager/MCSManager
pubDate: 2017-11-12 09:41:58
author: MCSManager
keyword: webshell
language: TypeScript
description:
Quick deployment, distributed, multi-user, modern management panel for Minecraft and Steam game servers  /  快速安装，分布式架构，多用户销售，现代化的 Minecraft 和 Steam 游戏服务器管理面板


title: btlo-network-webshell-analysis-lab
link: https://github.com/Bilal-Haider01/btlo-network-webshell-analysis-lab
pubDate: 2026-05-01 21:17:52
author: Bilal-Haider01
keyword: webshell
description:
Network traffic analysis lab focused on detecting and investigating web shell activity using PCAP data, Wireshark, and threat hunting techniques (BTLO).


title: cPanel-Fix
link: https://github.com/MrAriaNet/cPanel-Fix
pubDate: 2026-05-02 07:47:17
author: MrAriaNet
keyword: CVE-2026
language: Shell
description:
One security-remediation.sh for CVE-2026-41940 (cPanel), CVE-2026-31431 (kernel "Copy Fail"), CSF, optional domain/proxy cleanup, and optional operator hardening.


title: CVE-2026-31431-check
link: https://github.com/haydenjames/CVE-2026-31431-check
pubDate: 2026-05-02 12:17:15
author: haydenjames
keyword: CVE-2026
language: Shell
description:
Read-only checker for CVE-2026-31431 (algif_aead local root). Reports kernel/module state and suggests mitigations.


title: CVE-2026-XNU-AIO-KEVENT-UAF
link: https://github.com/Sonisi5085/CVE-2026-XNU-AIO-KEVENT-UAF
pubDate: 2026-04-14 18:07:25
author: Sonisi5085
keyword: CVE-2026
language: Objective-C
description:
Demonstrate XNU AIO kevent use-after-free, kernel panic, and double-free in iOS sandbox for security research


title: CVE-2026-2991
link: https://github.com/Jumpthereness578/CVE-2026-2991
pubDate: 2026-04-04 04:26:43
author: Jumpthereness578
keyword: CVE-2026
language: PHP
description:
Explore a PoC for CVE-2026-2991, an auth bypass in KiviCare 4.1.2 and earlier via the patient social-login REST endpoint


title: CVE-2026-31802
link: https://github.com/Recorded-texteditor120/CVE-2026-31802
pubDate: 2026-03-29 04:49:46
author: Recorded-texteditor120
keyword: CVE-2026
language: JavaScript
description:
Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.


title: RegPwn
link: https://github.com/tracyliving606/RegPwn
pubDate: 2026-03-26 12:38:27
author: tracyliving606
keyword: CVE-2026
language: C#
description:
Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions


title: CVE-2026-41940
link: https://github.com/Jenderal92/CVE-2026-41940
pubDate: 2026-05-01 23:43:28
author: Jenderal92
keyword: CVE-2026
language: Python
description:
Bulk scanner and mass exploitation tool for CVE-2026-41940 on cPanel/WHM, built for automated target validation and high-speed multi-threaded execution.


title: CVE-2026-2472-Vertex-AI-SDK-Google-Cloud
link: https://github.com/megafart1/CVE-2026-2472-Vertex-AI-SDK-Google-Cloud
pubDate: 2026-03-10 22:40:04
author: megafart1
keyword: CVE-2026
language: Python
description:
Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.


title: CVE-2026-2441-PoC
link: https://github.com/fartlover37/CVE-2026-2441-PoC
pubDate: 2026-03-03 22:19:18
author: fartlover37
keyword: CVE-2026
description:
Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.


title: CVE-2026-20841
link: https://github.com/hamzamalik3461/CVE-2026-20841
pubDate: 2024-09-22 20:19:06
author: hamzamalik3461
keyword: CVE-2026
description:
🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.


title: CVE-2026-20841-PoC
link: https://github.com/404godd/CVE-2026-20841-PoC
pubDate: 2026-02-26 13:21:28
author: 404godd
keyword: CVE-2026
description:
🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.


title: CVE-2026-24061
link: https://github.com/obrunolima1910/CVE-2026-24061
pubDate: 2026-02-04 03:46:10
author: obrunolima1910
keyword: CVE-2026
language: Python
description:
🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.


title: CVE-2026-31431-Linux-Kernel-Copy-Fail-Detector
link: https://github.com/nrnw/CVE-2026-31431-Linux-Kernel-Copy-Fail-Detector
pubDate: 2026-05-03 17:14:21
author: nrnw
keyword: CVE-2026
description:
Passive detection and OS-aware remediation for CVE-2026-31431 Linux kernel copy-fail vulnerability with Ansible automation support.


title: binghe001.github.io
link: https://github.com/binghe001/binghe001.github.io
pubDate: 2022-04-01 15:11:11
author: binghe001
keyword: 内网渗透
language: HTML
description:
📚 本静态博客是作者冰河多年从事多年互联网大厂开发、架构的学习历程技术汇总，旨在为大家提供一个清晰详细的学习教程，侧重点更倾向编写Java核心内容、底层原理、架构知识、渗透技术。如果本仓库能为您提供帮助，...


title: BingheGuide
link: https://github.com/binghe001/BingheGuide
pubDate: 2022-03-31 12:23:48
author: binghe001
keyword: 内网渗透
language: Python
description:
🔥🔥🔥 📚 本代码库是作者冰河多年从事互联网大厂开发、架构的学习历程技术汇总，旨在为大家提供一个清晰详细的学习教程，侧重点更倾向编写AI大模型、Java和Go核心内容、底层原理、架构知识、渗透技术。如果本仓库能...


title: RedTeam-Agent
link: https://github.com/ktol1/RedTeam-Agent
pubDate: 2026-02-28 20:16:58
author: ktol1
keyword: 内网渗透
language: C
description:
 RedTeam-Agent: AI-Powered Autonomous Red Team Framework via Model Context Protocol. AI红队与内网渗透自动化框架，支持 gogo, fscan, httpx, nuclei, impacket, playwright 等 15+ 渗透工具，让 LLM 直接化身安全审计黑客。


title: AiScan-N
link: https://github.com/SecNN/AiScan-N
pubDate: 2025-10-23 16:16:18
author: SecNN
keyword: 内网渗透
description:
AiScan-N 来了！这是一款基于人工智能驱动的Ai自动化网络安全（运维）工具，专注于网络安全评估、漏洞扫描、运维、应急响应、渗透测试自动化，Ai大模型工具集【CLI Agent】 ，Ai驱动的安全检测技术，提升安全测试（运维）效...


title: Intelligent-Android-Penetration-System
link: https://github.com/vegetableou/Intelligent-Android-Penetration-System
pubDate: 2026-04-10 11:57:10
author: vegetableou
keyword: 内网渗透
language: Smali
description:
本项目旨在研发一款高度自动化的智能渗透测试系统，其核心目标是实现对安卓设备的无人值守安全评估。与传统的单一漏洞扫描工具不同，本系统是一个集成了情报收集、智能决策与多向量攻击能力的统一调度平台。它能够...


title: wolfshell
link: https://github.com/0x7556/wolfshell
pubDate: 2025-09-25 23:23:17
author: 0x7556
keyword: 内网渗透
language: ASP.NET
description:
金刚狼：首款支持AI渗透的WebShell MCP，首款支持多层内网级联的ASPX、ASHX高级WebShell管理工具，AES加密通信，无需代理，内存加载渗透工具，无文件落地隐蔽渗透目标，动态代码执行，ShellCode加载(Metasploit/Cobalt Strike)，反弹Shell，S...


title: sec-links
link: https://github.com/EdinLyle/sec-links
pubDate: 2026-02-20 15:17:56
author: EdinLyle
keyword: 内网渗透
description:
整合日常学习、工作及网络所得笔记、安全大佬分析报告、面试题与技巧文档,安全大厂与安全标准，标准指南，按渗透、安服、运营、代码审计、内网、移动、应急、工控、AI/LLM安全、数据、业务、情报、分析、黑灰产对抗、S...


title: violation-outreach-wallpaper
link: https://github.com/YaoSiQian/violation-outreach-wallpaper
pubDate: 2026-02-15 11:15:52
author: YaoSiQian
keyword: 内网渗透
language: HTML
description:
【非官方】通俗来讲，违规外联指的是内部网络计算机私自接入互联网或其他公共网络。更具象一些来理解，内部网络计算机连接互联网或内部网络中使用的移动存储载体在非内部网络计算机上使用等行为。违规外联相当于在...


title: masscan-windwos-1.3.2
link: https://github.com/hsltz/masscan-windwos-1.3.2
pubDate: 2026-02-14 15:28:32
author: hsltz
keyword: 内网渗透
description:
masscan 是一款高速的异步端口扫描工具，采用独特的传输方式，可在短时间内完成大规模网络扫描。它专为扫描整个互联网或大型网段设计，扫描速度远超传统工具如 nmap，常被用于网络安全评估与渗透测试。


title: 123465
link: https://github.com/yycns/123465
pubDate: 2026-05-01 22:33:31
author: yycns
keyword: 漏洞检测
language: Python
description:
ai_pentest 是一款基于 FastMCP（Model Context Protocol）构建的自动化网络安全扫描 Agent，核心解决传统安全扫描流程繁琐、效率低下、操作门槛高的痛点。其采用“目标输入→爬虫取IP→端口扫描→Web指纹识别→漏洞POC扫描→结果展示...


title: hawkeye-cloud
link: https://github.com/spojchil/hawkeye-cloud
pubDate: 2026-04-22 16:01:14
author: spojchil
keyword: 漏洞检测
language: Java
description:
Hawkeye Cloud (鹰眼云) —— 基于 Java 21 + Spring Cloud 的现代化分布式漏洞检测平台。采用微服务架构，支持 SaaS 多租户与私有化部署，具备高性能异步检测链路。目前正在开发。


title: CodeGuard-AI
link: https://github.com/rewiii/CodeGuard-AI
pubDate: 2026-04-30 22:00:43
author: rewiii
keyword: 漏洞检测
language: Python
description:
该系统核心解决了后端团队代码规范不统一、人工Review效率低下、遗留代码技术债堆积的核心痛点。它由4个专业Agent组成：  架构Agent：负责分析整体架构是否符合公司最新规范； 质量Agent：自动检测代码坏味道、安全漏洞和性...


title: concurrency-test-tool
link: https://github.com/C4nXu3/concurrency-test-tool
pubDate: 2026-04-28 23:18:42
author: C4nXu3
keyword: 漏洞检测
description:
concurrency-test-tool - 并发漏洞测试工具  一个基于 Java Swing 的图形化并发漏洞测试工具，用于检测和验证 Web 应用中的并发安全性问题。  功能特性：  - 📤 数据包输入 - 支持自定义 HTTP 请求数据包 - ⚡ 并发测试 - 可配置并发线程...


title: dual_engine_shield
link: https://github.com/yixixiawa/dual_engine_shield
pubDate: 2026-04-17 13:43:10
author: yixixiawa
keyword: 漏洞检测
language: Python
description:
双擎智盾是一个综合性的智能安全检测平台，集成了网络钓鱼检测和代码漏洞检测功能。该平台采用前后端分离架构，前端使用Vue 3构建，后端使用python-django开发，提供了直观的用户界面和强大的安全检测能力。


title: NTE-Auto-Fish
link: https://github.com/z-whan/NTE-Auto-Fish
pubDate: 2026-04-30 11:00:26
author: z-whan
keyword: 钓鱼
language: Python
description:
基于 OpenCV 的《异环》自动钓鱼实验工具，提供图形控制面板、实时日志、鱼饵追踪与本地统计功能。  An OpenCV-based auto-fishing experiment tool for NTE, with a GUI control panel, real-time logs, bait tracking, and local statistics.


title: better-genshin-impact
link: https://github.com/babalae/better-genshin-impact
pubDate: 2023-08-27 09:02:45
author: babalae
keyword: 钓鱼
language: C#
description:
📦BetterGI · 更好的原神 - 自动拾取 | 自动剧情 | 全自动钓鱼(AI) | 全自动七圣召唤 | 自动伐木 | 自动刷本 | 自动采集/挖矿/锄地 | 一条龙 | 全连音游 | 自动烹饪 - UI Automation Testing Tools For Genshin Impact


title: DeepFakeDetection2
link: https://github.com/DDDDDDddd28/DeepFakeDetection2
pubDate: 2026-05-01 15:59:59
author: DDDDDDddd28
keyword: 钓鱼
language: Vue
description:
随着数字化生活方式的普及与人工智能技术的快速演进，电信网络诈骗手段正呈现智能化、隐蔽化与多模态化趋势，AI语音伪造、深度换脸、钓鱼话术诱导等新型骗局不断出现，给公众财产安全和社会治理带来了严峻挑战。 基...


title: qualcomm_gbl_exploit_poc
link: https://github.com/rehman2052/qualcomm_gbl_exploit_poc
pubDate: 2026-03-15 23:47:06
author: rehman2052
keyword: POC
language: C
description:
Demonstrate exploiting Qualcomm's GBL bootloader to load unsigned UEFI apps and gain arbitrary code execution for unlocking device boot states.


title: options-scanner
link: https://github.com/suli99/options-scanner
pubDate: 2018-09-20 08:08:02
author: suli99
keyword: POC
language: JavaScript
description:
Visualize options market data with gamma exposure, volatility, and positioning across multiple tickers for informed trade analysis.


title: pocketdoctor-gateaway
link: https://github.com/cartelesantana/pocketdoctor-gateaway
pubDate: 2023-07-04 20:47:49
author: cartelesantana
keyword: POC
language: CSS
description:
Provide secure API routing between the doctor-on-my-phone frontend and Google Gemini, protecting the API key and managing request limits.


title: Pocket-Pad
link: https://github.com/Bifcen/Pocket-Pad
pubDate: 2026-03-14 06:01:01
author: Bifcen
keyword: POC
description:
Turn your Android device into a low-latency Bluetooth HID gamepad recognized as a native controller by Windows and other systems without extra software.


title: PoCDistancia
link: https://github.com/andelfino/PoCDistancia
pubDate: 2026-05-04 08:47:09
author: andelfino
keyword: POC
language: Java
description:
Es una implementacion de la Prueba de Concepto que refiere a la distancia entre el local y  elcliente.


title: Top-Conference-Best-Papers
link: https://github.com/jokierpro/Top-Conference-Best-Papers
pubDate: 2026-02-21 16:36:27
author: jokierpro
keyword: RCE
description:
🏆 Discover top ML/NLP research by exploring Best Paper winners from major venues (2022-2026) to enhance your understanding of high-impact work.


title: Nextjs_RCE_Exploit_Tool
link: https://github.com/sobuj0007/Nextjs_RCE_Exploit_Tool
pubDate: 2025-12-26 03:28:28
author: sobuj0007
keyword: RCE
language: Go
description:
🔍 Exploit CVE-2025-55182 in Next.js with this versatile tool for security research, featuring advanced payloads and WAF bypass techniques.


title: react2shell-scanner
link: https://github.com/meneim99/react2shell-scanner
pubDate: 2023-11-28 02:17:43
author: meneim99
keyword: RCE
language: Python
description:
🔍 Detect vulnerabilities CVE-2025-55182 and CVE-2025-66478 in Next.js apps with this reliable command-line scanner.


title: CVE-2025-55182-scanner
link: https://github.com/mayank729/CVE-2025-55182-scanner
pubDate: 2022-06-17 18:19:10
author: mayank729
keyword: RCE
language: Python
description:
🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.


title: php-webshell-static-detector
link: https://github.com/kathy3405/php-webshell-static-detector
pubDate: 2026-05-04 03:19:05
author: kathy3405
keyword: webshell
language: Python
description:
Static PHP webshell detection using TF-IDF models, TextCNN, CodeBERT, and robustness testing on obfuscated samples.


title: cpanel-sessionscribe
link: https://github.com/rfxn/cpanel-sessionscribe
pubDate: 2026-04-30 22:32:43
author: rfxn
keyword: CVE-2026
language: Shell
description:
Detection, mitigation, and reverse-engineering tooling for CVE-2026-41940 (SessionScribe): the cPanel/WHM unauthenticated session-forgery vulnerability disclosed 2026-04-28. Defense-in-depth active mitigation shim, ModSec rule pack, remote probe, on-host IOC scanner, and per-tier RE snapshot collec...


title: STProcessMonitorBYOVD
link: https://github.com/wutang700/STProcessMonitorBYOVD
pubDate: 2024-04-20 12:18:24
author: wutang700
keyword: CVE-2026
language: C++
description:
🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.


title: CVE-2026-31431_CopyFail_LinuxKernel_LPE
link: https://github.com/xn0kkx/CVE-2026-31431_CopyFail_LinuxKernel_LPE
pubDate: 2026-05-04 08:28:27
author: xn0kkx
keyword: CVE-2026
language: Python
description:
Educational rewrite of the Copy Fail PoC (CVE-2026-31431) — Linux kernel LPE via algif_aead in-place crypto + splice() page-cache write


title: copyfail-check
link: https://github.com/codesource/copyfail-check
pubDate: 2026-05-04 06:04:33
author: codesource
keyword: CVE-2026
language: Shell
description:
Shell script to detect CVE-2026-31431 (Copy Fail) exposure and mitigations on Linux systems: kernel check, module state, boot params, AF_ALG reachability, and distro patch status.


title: flask-poc
link: https://github.com/fitrifazleee/flask-poc
pubDate: 2026-05-03 23:51:00
author: fitrifazleee
keyword: POC
language: Python
description:
IIoT PoC: Edge-to-Cloud event logger using Raspberry Pi CM5, Python Flask, and Vercel serverless functions.


title: poc-fls-node-epicronicles
link: https://github.com/mamon9022/poc-fls-node-epicronicles
pubDate: 2026-02-26 19:42:55
author: mamon9022
keyword: POC
language: TypeScript
description:
🌌 Build and explore a 3D space sim with a procedural galaxy, interactive HUD, and dynamic Redux Toolkit state management.


title: nuclei_poc
link: https://github.com/adysec/nuclei_poc
pubDate: 2024-05-07 11:03:34
author: adysec
keyword: POC
description:
Nuclei POC，每2小时更新 | 自动整合全网Nuclei的漏洞POC，实时同步更新最新POC，保存已被删除的POC。通过批量克隆Github项目，获取Nuclei POC，并将POC按类别分类存放，使用Github Action实现。已有41w+POC，其中3.5w+高质量POC


title: CopyFail-Penguin
link: https://github.com/chavezvic/CopyFail-Penguin
pubDate: 2026-05-04 12:47:31
author: chavezvic
keyword: CVE-2026
description:
A safe Linux checker for CopyFail/CVE-2026-31431 that reviews kernel version, update status, reboot status, and algif_aead exposure indicators.


title: BigFix-CopyFail-AlmaLinux-Content
link: https://github.com/kvendler/BigFix-CopyFail-AlmaLinux-Content
pubDate: 2026-05-04 11:56:24
author: kvendler
keyword: CVE-2026
language: HTML
description:
This repository contains BigFix Content that I created for identifying the AlmaLinux systems that require patching to remediate CVE-2026-31431


title: fishing-game
link: https://github.com/deeptexas-ai/fishing-game
pubDate: 2025-04-07 00:00:46
author: deeptexas-ai
keyword: 钓鱼
language: C++
description:
Fishing game / 钓鱼游戏 / 釣魚遊戲 - Relaxing fishing simulator with progression, upgrades, multiple locations, achievements


title: All-Defense-Tool
link: https://github.com/guchangan1/All-Defense-Tool
pubDate: 2022-04-25 19:45:06
author: guchangan1
keyword: 钓鱼
language: Python
description:
本项目集成了全网优秀的攻防武器工具项目，包含自动化利用，子域名、目录扫描、端口扫描等信息收集工具，各大中间件、cms、OA漏洞利用工具，爆破工具、内网横向、免杀、社工钓鱼以及应急响应、甲方安全资料等其他安全...


title: CVE-2025-55182
link: https://github.com/phornnato/CVE-2025-55182
pubDate: 2024-05-29 00:48:51
author: phornnato
keyword: POC
language: Python
description:
🚨 Exploit and scan for CVE-2025-55182, a critical React/Next.js vulnerability enabling remote code execution through prototype pollution techniques.


title: CVE-2025-55182-poc
link: https://github.com/slreaperking/CVE-2025-55182-poc
pubDate: 2025-12-25 02:48:07
author: slreaperking
keyword: POC
language: Shell
description:
🚨 Demonstrate CVE-2025-55182, a critical React vulnerability allowing remote code execution via prototype chain pollution in `react-server-dom-webpack@19.0.0`.


title: splunk-mcp
link: https://github.com/ordinary3oy/splunk-mcp
pubDate: 2025-04-13 22:00:54
author: ordinary3oy
keyword: POC
language: Shell
description:
🚀 Create a PoC environment for integrating Splunk MCP Server with Claude Desktop, featuring easy setup and robust authentication.


title: xwiki-exploit
link: https://github.com/hitchy22/xwiki-exploit
pubDate: 2025-12-21 01:37:11
author: hitchy22
keyword: POC
language: Python
description:
🛠️ Exploit remote code execution vulnerability in XWiki through SolrSearch, affecting the platform’s security and user data integrity.


title: xwiki-rce
link: https://github.com/ffqnayt/xwiki-rce
pubDate: 2025-05-21 03:24:03
author: ffqnayt
keyword: POC
language: Python
description:
🛠️ Exploit a critical remote code execution vulnerability in XWiki, affecting its confidentiality and integrity; patches available in recent versions.


title: cve-2025-8088
link: https://github.com/Markusino488/cve-2025-8088
pubDate: 2025-12-20 21:52:21
author: Markusino488
keyword: POC
language: Python
description:
🛠 Exploit CVE-2025-8088 with this Python tool to generate malicious WinRAR archives that ensure payload persistence in Windows startup folders.


title: CVE-2025-55182-research
link: https://github.com/Farhan9488/CVE-2025-55182-research
pubDate: 2025-12-24 22:48:19
author: Farhan9488
keyword: RCE
language: JavaScript
description:
🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.


title: 678
link: https://github.com/Perpaft11/678
pubDate: 2024-05-03 01:30:10
author: Perpaft11
keyword: RCE
language: HTML
description:
🚀 Explore and manage your GitHub projects efficiently with 678, simplifying collaboration and enhancing productivity for developers.


title: int3rceptor
link: https://github.com/xdimondfan23/int3rceptor
pubDate: 2025-12-15 06:06:44
author: xdimondfan23
keyword: RCE
language: Rust
description:
🚀 Enhance your applications with int3rceptor, a robust interceptor library for seamless data handling in Rust and Vue.


title: Wordpress-BRUTE-FORCE-UPLOAD-SHELL
link: https://github.com/martinaparched251/Wordpress-BRUTE-FORCE-UPLOAD-SHELL
pubDate: 2025-11-30 03:38:57
author: martinaparched251
keyword: RCE
language: Python
description:
🔍 Scan and exploit WordPress vulnerabilities effortlessly with this advanced tool for shell uploads and comprehensive security assessment.


title: prickly
link: https://github.com/carolinavigil/prickly
pubDate: 2025-05-17 00:20:42
author: carolinavigil
keyword: RCE
language: Solidity
description:
🌵 Build and manage efficient, scalable workflows with Prickly, designed to simplify your project tracking and enhance team collaboration.


title: lab-cve-2016-15042
link: https://github.com/Aditya43621/lab-cve-2016-15042
pubDate: 2023-10-23 13:54:10
author: Aditya43621
keyword: RCE
language: JavaScript
description:
🛠️ Validate and demonstrate CVE-2016-15042 with a Dockerized lab for unauthenticated file uploads in WordPress file managers.


title: lab-cve-2020-0610
link: https://github.com/Riocipta75/lab-cve-2020-0610
pubDate: 2025-09-04 21:21:35
author: Riocipta75
keyword: RCE
language: PowerShell
description:
🔍 Create a safe lab environment for testing CVE-2020-0610, a critical RCE vulnerability in Windows RD Gateway, with minimal disruption using DTLS techniques.


title: CVE-2025-54253-Exploit-Demo
link: https://github.com/jm7knz/CVE-2025-54253-Exploit-Demo
pubDate: 2025-08-18 06:04:33
author: jm7knz
keyword: RCE
language: Python
description:
🐙 CVE-2025-54253 exploit demo for Adobe AEM Forms on JEE: OGNL injection to RCE with PoC, Python 3.10 exploit code, reproducer and mitigation guidance.


title: CVE-2025-54424
link: https://github.com/hophtien/CVE-2025-54424
pubDate: 2025-08-14 13:16:16
author: hophtien
keyword: RCE
language: Python
description:
CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐


title: copyfail-exploit
link: https://github.com/xeloxa/copyfail-exploit
pubDate: 2026-05-04 17:48:59
author: xeloxa
keyword: CVE-2026
language: Python
description:
Copy Fail (CVE-2026-31431) LPE exploit. A clean, multi-arch Python reimplementation targeting the Linux kernel AF_ALG page cache vulnerability.


title: CVE-2026-34159-Vulnerability-Research-Analysis-Detection
link: https://github.com/rohithronanki/CVE-2026-34159-Vulnerability-Research-Analysis-Detection
pubDate: 2026-05-04 16:59:55
author: rohithronanki
keyword: CVE-2026
description:
Critical buffer validation bypass in deserialize_tensor() (llama.cpp < b8492). Null tensor buffer skips bounds check, enabling unauthenticated arbitrary R/W via GRAPH_COMPUTE. ASLR bypass + RCE over TCP 50052.


title: copy-fail-CVE-2026-31431-shell
link: https://github.com/g1nt0n1x/copy-fail-CVE-2026-31431-shell
pubDate: 2026-05-04 15:53:33
author: g1nt0n1x
keyword: CVE-2026
language: Shell
description:
PoC shell exploit for CVE-2026-31431 (copy_fail) — Linux LPE via AF_ALG + splice page-cache overwrite. Single-shot, no race condition, kernel 4.9–6.18.


title: cve-2026-6379
link: https://github.com/dinosn/cve-2026-6379
pubDate: 2026-05-04 15:04:30
author: dinosn
keyword: CVE-2026
language: Python
description:
Lab kit for CVE-2026-6379 — WP Photo Album Plus < 9.1.11.001 unauthenticated SQL injection. Docker lab + time-based blind PoC. For authorized security research and education.


title: bmad-poc
link: https://github.com/shrichopade/bmad-poc
pubDate: 2026-04-22 20:15:51
author: shrichopade
keyword: POC
language: Python
description:
A proof-of-concept implementation of the BMAD methodology (not BMAD Framework) for building intelligent AI agents with built-in compliance checking and portfolio advisory capabilities.


title: openxet
link: https://github.com/ggoggam/openxet
pubDate: 2026-02-16 10:59:45
author: ggoggam
keyword: POC
language: Rust
description:
An opensource Rust PoC implementation of Xet protocol compliant CAS (Content Addressable Storage) server with frontend.


title: ThreadCPUAssignment_POC
link: https://github.com/Prajal-07S/ThreadCPUAssignment_POC
pubDate: 2025-10-13 18:19:22
author: Prajal-07S
keyword: POC
language: C
description:
🛠️ Experiment with assigning threads to specific CPUs and blocking them using a high-priority thread for process management insights.


title: CVE-2024-47176
link: https://github.com/deancooreman/CVE-2024-47176
pubDate: 2026-03-13 21:35:34
author: deancooreman
keyword: RCE
language: Shell
description:
Automated VirtualBox lab environment to exploit CVE-2024-47176 — an unauthenticated RCE vulnerability in CUPS — using a custom Python exploit and Kali Linux.


title: CVE-2026-41940-cPanel-WHM-Verification-Tool
link: https://github.com/sercanokur/CVE-2026-41940-cPanel-WHM-Verification-Tool
pubDate: 2026-05-04 19:19:09
author: sercanokur
keyword: CVE-2026
language: Python
description:
This repository contains a Python verification script for `CVE-2026-41940`, a critical authentication bypass vulnerability disclosed in cPanel & WHM.  > This project is intended for authorized defensive validation only. It is not intended for exploit development, unauthorized access, or misuse agai...


title: pocketvue
link: https://github.com/Spicephysicalentity43/pocketvue
pubDate: 2025-11-26 04:07:40
author: Spicephysicalentity43
keyword: POC
language: Go
description:
🚀 Launch customer-facing products quickly with Pocketvue, an all-in-one SaaS starter kit featuring a PocketBase backend and Nuxt frontend.


title: Depixelization_poc
link: https://github.com/literatiselfpunishment625/Depixelization_poc
pubDate: 2025-11-23 16:38:19
author: literatiselfpunishment625
keyword: POC
language: Python
description:
🖼️ Recover plaintext from pixelized screenshots using this proof of concept, designed for images processed with a linear box filter.


title: DeltaH-PoC
link: https://github.com/darejinn/DeltaH-PoC
pubDate: 2026-05-01 10:00:06
author: darejinn
keyword: POC
language: Python
description:
Hidden-state perturbation magnitude (‖Δh‖₂) as a single-feature variant pathogenicity baseline for genomic foundation models — Paper 2, sibling of darejinn/gDTR-PoC


title: poc-xa-transaction
link: https://github.com/fernandomac/poc-xa-transaction
pubDate: 2026-04-30 23:50:07
author: fernandomac
keyword: POC
language: Shell
description:
Validates distributed XA transactions across MySQL and Apache Artemis using Spring Boot 3.5 + Atomikos. Proves that a single two-phase commit (2PC) coordinates a DB write and a JMS send atomically — if the transaction rolls back, neither the database record nor the queue message survives.


title: IndustrialJEPA
link: https://github.com/Forgis-Research/IndustrialJEPA
pubDate: 2026-03-04 17:15:28
author: Forgis-Research
keyword: POC
language: HTML
description:
Accompanying IndustrialJEPA (poc for industrial world model). Targeting NeurIPS workshop submission (May 26)


title: CVE-2026-23918-Apache-H2-PoC
link: https://github.com/xeloxa/CVE-2026-23918-Apache-H2-PoC
pubDate: 2026-05-06 21:00:15
author: xeloxa
keyword: RCE
language: Python
description:
Proof-of-Concept exploit for CVE-2026-23918 (Apache mod_http2 double-free). Features multi-mode DoS (Rapid-RST, Slow-Drip) and passive RCE/vulnerability detection for Apache 2.4.66.


title: Honeypot-Lab
link: https://github.com/Harshil015/Honeypot-Lab
pubDate: 2026-02-03 18:05:24
author: Harshil015
keyword: webshell
language: Python
description:
A Python/Flask-based web honeypot that simulates real-world vulnerabilities (RCE, brute-force, webshell uploads, JNDI injection) to capture attacker behavior and practice Red/Blue/Purple Team security workflows.


title: SOC-L1-Alert-Reporting-Escalation-Communication
link: https://github.com/AdityaBhatt3010/SOC-L1-Alert-Reporting-Escalation-Communication
pubDate: 2026-05-06 17:51:03
author: AdityaBhatt3010
keyword: webshell
description:
SOC Alert Reporting, Escalation & Communication walkthrough covering phishing investigation, webshell detection, Five Ws reporting methodology, SOC escalation workflows, and real-world L1 analyst communication practices.


title: shield
link: https://github.com/zcxads666/shield
pubDate: 2026-05-05 18:36:39
author: zcxads666
keyword: webshell
language: Go
description:
Shield — 轻量级 Go Web 应用防火墙 A lightweight Go Web Application Firewall  DDoS/CC mitigation · SQLi detection · XSS filtering · WebShell blocking · brute force protection · waiting room · waf——DDoS/CC 防护 · SQL 注入检测 · XSS 过滤 · WebShell 拦截 · 暴力破解...


title: Deteccion_WebShell
link: https://github.com/Roberto-Negro-S/Deteccion_WebShell
pubDate: 2026-05-05 02:35:10
author: Roberto-Negro-S
keyword: webshell
description:
Documentación y resolución de una intrusión mediante Web Shell (MITRE T1505.003). Incluye la fase ofensiva (RCE), la gestión de incidentes de infraestructura en Linux (LVM) y la metodología de detección forense utilizando Splunk.


title: copyfail-rs
link: https://github.com/diemoeve/copyfail-rs
pubDate: 2026-04-30 22:04:58
author: diemoeve
keyword: CVE-2026
language: Rust
description:
CopyFail (CVE-2026-31431): Linux kernel page-cache PrivEsc PoC + the only public detection tool. Novel PAM auth-bypass vector + Sigma/auditd/eBPF rules.


title: CVE-2026-31431-Copy-Fail---Advanced-LPE-Proof-of-Concept---C-Rewrite
link: https://github.com/iblamenear/CVE-2026-31431-Copy-Fail---Advanced-LPE-Proof-of-Concept---C-Rewrite
pubDate: 2026-05-06 20:08:45
author: iblamenear
keyword: CVE-2026
language: C
description:
Copy Fail (CVE-2026-31431) is a logic bug in the Linux kernel's authencesn cryptographic template. It lets an unprivileged local user trigger a deterministic, controlled 4-byte write into the page cache of any readable file on the system.


title: legendary-goggles
link: https://github.com/lllcy12/legendary-goggles
pubDate: 2026-05-06 17:25:58
author: lllcy12
keyword: 漏洞检测
description:
AI Dev Agent 研发助手，主要解决研发流程中需求理解慢、代码上下文分散、影响范围难定位、Code Review 重复且容易遗漏、测试用例补充不完整等核心痛点。该 Agent 能够读取本地代码仓库和项目文档，根据需求描述自动检索相关文...


title: prismx
link: https://github.com/yqcs/prismx
pubDate: 2023-12-25 14:08:41
author: yqcs
keyword: 漏洞检测
language: Go
description:
:: Prism X · Automated Enterprise Network Security Risk Detection and Vulnerability Scanning Tool  / 棱镜 X · 自动化企业网络安全风险检测、漏洞扫描工具


title: Intelligent-Phishing-Email-Detection-System
link: https://github.com/968626/Intelligent-Phishing-Email-Detection-System
pubDate: 2026-05-05 12:58:04
author: 968626
keyword: 钓鱼
description:
本项目是一个基于机器学习的钓鱼邮件智能检测系统，采用多种机器学习算法对邮件进行分类，能够有效识别正常邮件、垃圾邮件和钓鱼邮件。系统提供Web界面和API接口，支持单邮件检测、批量检测、附件风险分析等功能。


title: shieldclaw
link: https://github.com/blondres04/shieldclaw
pubDate: 2026-03-30 01:09:06
author: blondres04
keyword: POC
language: Python
description:
Evidence-backed SAST verification engine that turns Semgrep findings into true/false-positive verdicts via LLM-generated PoCs, human approval, and hardened Docker detonation.


title: security-case-examples
link: https://github.com/averonsec/security-case-examples
pubDate: 2026-02-07 08:25:04
author: averonsec
keyword: RCE
description:
Real-world web security case studies (XSS, SSRF, RCE, misconfigurations). Educational and sanitized reports.


title: wp-compromise-hunter
link: https://github.com/yankywilson/wp-compromise-hunter
pubDate: 2026-05-07 00:57:26
author: yankywilson
keyword: webshell
language: PowerShell
description:
Threat hunting toolkit for detecting compromised WordPress sites and protecting downstream users. KQL, Sigma, YARA, and Suricata detections for webshells, ClickFix lures, infostealer delivery chains, and RMM abuse. Defender's perspective — for SOC analysts protecting users who visit compromised W...


title: CVE-2026-41940-Exploit-PoC
link: https://github.com/Defacto-ridgepole254/CVE-2026-41940-Exploit-PoC
pubDate: 2026-05-07 02:08:48
author: Defacto-ridgepole254
keyword: CVE-2026
description:
Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.


title: CVE-2026-31431-Linux-Copy-Fail
link: https://github.com/Dullpurple-sloop726/CVE-2026-31431-Linux-Copy-Fail
pubDate: 2026-05-06 17:49:14
author: Dullpurple-sloop726
keyword: CVE-2026
language: Rust
description:
Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.


title: copyfail-rs
link: https://github.com/Liverwortenuresis371/copyfail-rs
pubDate: 2026-05-05 12:58:21
author: Liverwortenuresis371
keyword: CVE-2026
language: Rust
description:
Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.


title: block-copyfail
link: https://github.com/atgreen/block-copyfail
pubDate: 2026-05-01 19:17:59
author: atgreen
keyword: CVE-2026
language: Common Lisp
description:
BPF LSM blocker for CVE-2026-31431 (Copy Fail) — blocks authencesn AF_ALG binds at runtime without rebooting


title: Estudo-de-Caso-CVE-2026-31431-CopyFail
link: https://github.com/pedro-lucas-melo/Estudo-de-Caso-CVE-2026-31431-CopyFail
pubDate: 2026-05-07 04:21:32
author: pedro-lucas-melo
keyword: CVE-2026
language: Shell
description:
🔐 Estudo de caso completo do CVE-2026-31431 (CopyFail) — vulnerabilidade crítica de escalada de privilégio no kernel Linux. Inclui análise técnica, scripts de verificação, hardening e playbook de resposta a incidentes. Fins educacionais.


title: CVE-2026-0073-Android-ADBD-bypass-POC
link: https://github.com/MartinPSDev/CVE-2026-0073-Android-ADBD-bypass-POC
pubDate: 2026-05-07 07:11:23
author: MartinPSDev
keyword: CVE-2026
language: Python
description:
CVE-2026-0073 — Android ADB daemon (adbd) TLS authentication bypass via EVP_PKEY_cmp type confusion. Gain unauthorized shell access over WiFi using EC/Ed25519 key mismatch. PoC exploit for Android 14+.


title: chub-supply-chain-poc
link: https://github.com/Darelleforehand432/chub-supply-chain-poc
pubDate: 2026-04-17 05:43:41
author: Darelleforehand432
keyword: POC
description:
Expose a Context Hub supply chain proof of concept that shows silent dependency injection in @aisuite/chub v0.1.3 through the MCP docs pipeline


title: XSS-HUNTER
link: https://github.com/brittle-finance685/XSS-HUNTER
pubDate: 2026-04-15 09:07:45
author: brittle-finance685
keyword: POC
language: Python
description:
Scan reflected XSS with an automated bug bounty workflow that chains tools from subdomain discovery to confirmed PoC findings


title: proof
link: https://github.com/dry-abscess93/proof
pubDate: 2026-04-14 06:53:39
author: dry-abscess93
keyword: POC
language: TypeScript
description:
Record and verify tamper-proof SHA-256 proof chains for AI decisions via MCP, SDK, or REST API, with JSON-LD export for audits


title: CVE_2025_24257----NOT-MINE
link: https://github.com/Learningdisordercapital35/CVE_2025_24257----NOT-MINE
pubDate: 2026-04-04 11:42:55
author: Learningdisordercapital35
keyword: POC
language: Objective-C
description:
Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read/write and panic analysis


title: ZeroLogon-PoC-DC-Pwn
link: https://github.com/mods20hh/ZeroLogon-PoC-DC-Pwn
pubDate: 2025-12-06 18:17:38
author: mods20hh
keyword: POC
language: Python
description:
Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.


title: copy-fail-c
link: https://github.com/tgies/copy-fail-c
pubDate: 2026-04-30 07:29:14
author: tgies
keyword: CVE-2026
language: C
description:
Cross-platform C port of the Copy Fail Linux LPE (CVE-2026-31431). Disclosed 2026-04-29 by Theori / Xint.


title: CVE-2026-31431-live-code-corruption
link: https://github.com/ikow/CVE-2026-31431-live-code-corruption
pubDate: 2026-05-07 10:58:48
author: ikow
keyword: CVE-2026
language: C
description:
CVE-2026-31431 (Copy Fail) novel exploit: live code corruption via page cache. Overwrites libc exit() code through MAP_PRIVATE page sharing — affects ALL running processes.


title: smart-contract-security
link: https://github.com/josmiles/smart-contract-security
pubDate: 2026-05-07 15:04:44
author: josmiles
keyword: POC
description:
Smart contract auditing journey — Ethernaut, Damn Vulnerable DeFi, exploit POCs, and audit reports. By Joseph Kamanja.


title: MT5-volume-profile-indicator
link: https://github.com/lenardclimatical374/MT5-volume-profile-indicator
pubDate: 2026-05-02 00:00:28
author: lenardclimatical374
keyword: POC
language: C#
description:
Display TradingView-style Volume Profile on MetaTrader 5 and 4 with POC, Value Area, and session statistics in a desktop manager.


title: UPE-TESTING-2026
link: https://github.com/eriodictyonspringcleaning464/UPE-TESTING-2026
pubDate: 2026-04-28 22:20:10
author: eriodictyonspringcleaning464
keyword: POC
language: C
description:
Manage UPE Testing 2026: track tests, organize student work, and support course evaluation with clear project records


title: Exploit-Hub
link: https://github.com/Carsonregular365/Exploit-Hub
pubDate: 2026-04-28 06:26:38
author: Carsonregular365
keyword: POC
language: Python
description:
Collect CVE research, exploit POCs, and defensive guidance for authorized security testing and vulnerability analysis


title: meok-mcp-injection-scan-mcp
link: https://github.com/CSOAI-ORG/meok-mcp-injection-scan-mcp
pubDate: 2026-04-26 23:46:49
author: CSOAI-ORG
keyword: RCE
language: Python
description:
MCP injection-scanner — 30+ canonical detection rules across 5 severity tiers for the April 2026 Anthropic MCP RCE class. By MEOK AI Labs.


title: adbHijacker
link: https://github.com/unnaim/adbHijacker
pubDate: 2026-05-07 12:13:12
author: unnaim
keyword: CVE-2026
language: Python
description:
A PoC tool for the CVE-2026-0073 on android 11+ devices which allows instant zero click RCE on any unpatched device with adb over tcp enabled


title: Copy-fail-CVE-2026-31431-Exploit-in-C
link: https://github.com/Mr-bv/Copy-fail-CVE-2026-31431-Exploit-in-C
pubDate: 2026-05-07 12:59:57
author: Mr-bv
keyword: CVE-2026
language: C
description:
Discovery and original disclosure of CVE-2026-31431: Theori / Xint. Public writeup: https://copy.fail/.


title: Fscan-Output-POC-Parser
link: https://github.com/Olivaire/Fscan-Output-POC-Parser
pubDate: 2026-04-28 02:09:00
author: Olivaire
keyword: POC
language: Go
description:
comprehensive internal network scanning tool with one-click automated vulnerability scanning parse, organize, and beautify Fscan output results with structured POC reporting and recon data synthesis.


title: Copy-Fail-CVE-2026-31431-Kubernetes-PoC
link: https://github.com/Percivalll/Copy-Fail-CVE-2026-31431-Kubernetes-PoC
pubDate: 2026-04-30 19:33:22
author: Percivalll
keyword: CVE-2026
language: C
description:
PoC: fully unprivileged container escape to node-level code execution on Kubernetes via CVE-2026-31431 page-cache corruption + shared image layers. Validated on Alibaba Cloud ACK and Amazon EKS.


title: xssweb1
link: https://github.com/hzy11111111/xssweb1
pubDate: 2026-05-07 15:16:28
author: hzy11111111
keyword: 漏洞检测
description:
 我构建了一个基于多 Agent 协作的智能 XSS 漏洞检测 Web 平台。该项目解决的核心痛点是：传统 XSS 扫描工具（如   DOMPurify、WAF 规则引擎）依赖静态特征匹配，对 DOM 型   XSS、原型链污染衍生注入等现代变种检出率低，且误报率高...


title: PocketLibrary
link: https://github.com/aholiuk/PocketLibrary
pubDate: 2026-05-04 20:25:27
author: aholiuk
keyword: POC
language: Java
description:
• Buch Collection mit gelesenen Büchern und ihren Fortschritt • Eigene Buchbewertungen • Vorschläge zum Lesen • Möglichkeit, ein Test durchzuführen, wenn man weisst nicht was man lesen will


title: Shellcode-Memory-Fluctuation
link: https://github.com/Uwmtor/Shellcode-Memory-Fluctuation
pubDate: 2026-04-02 21:02:50
author: Uwmtor
keyword: POC
language: C++
description:
Advanced memory evasion PoC that cyclically encrypts shellcode and fluctuates between RW/NoAccess and RX memory protections to bypass memory scanners like Moneta and PE-Sieve. 


title: gifs-app
link: https://github.com/gmqdev/gifs-app
pubDate: 2026-05-05 22:04:27
author: gmqdev
keyword: POC
language: TypeScript
description:
[PoC] A modern React application built with TypeScript and Vite that allows users to search and discover GIFs using the Giphy API. Features include optimized searching with debounce, search history tracking, and a clean, responsive UI.


title: copyfail
link: https://github.com/kw-soft/copyfail
pubDate: 2026-05-07 20:05:20
author: kw-soft
keyword: CVE-2026
language: Shell
description:
Copy Fail (CVE-2026-31431) is a logic flaw in the Linux kernel's algif_aead module — part of the AF_ALG userspace crypto API. It was disclosed on April 29, 2026 by Theori / Xint Code.


title: CVE-2025-32463_chwoot
link: https://github.com/yeremeu/CVE-2025-32463_chwoot
pubDate: 2025-07-05 02:20:09
author: yeremeu
keyword: POC
language: Shell
description:
Demonstrate CVE-2025-32463 with this PoC for sudo's chroot feature. Explore the exploit and its impact on vulnerable sudo versions. 🐱💻🔒


title: ProyectoFinal_PocketDishes
link: https://github.com/ArellanoAndre/ProyectoFinal_PocketDishes
pubDate: 2026-03-24 14:24:45
author: ArellanoAndre
keyword: POC
language: Kotlin
description:
:  🚀 PocketDishes Aplicación móvil desarrollada en Android que permite explorar platillos, gestionar pedidos y mejorar la experiencia del usuario mediante una interfaz intuitiva, moderna y funcional. Proyecto académico enfocado en el desarrollo de habilidades en diseño UI/UX y programación ...


title: nestJS-modular-monolith-cqrs-event-sourcing-architecture-template
link: https://github.com/aligcgl/nestJS-modular-monolith-cqrs-event-sourcing-architecture-template
pubDate: 2025-05-12 00:58:39
author: aligcgl
keyword: POC
language: TypeScript
description:
A scalable NestJS project template with modular monolith architecture, CQRS, and Event Sourcing support (MongoDB/Kafka/EventStoreDB). Built with DDD and Onion Architecture principles, ideal for PoC to production-ready backend systems.


title: bug-bounty
link: https://github.com/aw-junaid/bug-bounty
pubDate: 2026-04-16 19:04:31
author: aw-junaid
keyword: POC
language: HTML
description:
Documenting my security research journey: This repository contains detailed vulnerability write-ups, proof-of-concept (PoC) exploits, and the custom automation tools I use for reconnaissance and system assessment.


title: VMU-Vehicle-Management-Unit-
link: https://github.com/Guts-one/VMU-Vehicle-Management-Unit-
pubDate: 2026-02-26 03:19:43
author: Guts-one
keyword: POC
language: Python
description:
POC Vehicle Management Unit (VMU) for a power-split hybrid powertrain. This supervisory ECU coordinates the ICE and electric motor, selecting EV, ICE, hybrid, and regenerative modes based on driver demand, vehicle speed, battery SOC, and system limits, while applying basic protections for smooth, e...


title: php-in-jpg
link: https://github.com/Mxzinedits/php-in-jpg
pubDate: 2025-04-11 22:20:26
author: Mxzinedits
keyword: RCE
language: Python
description:
php-in-jpg is a simple yet flexible tool that generates .jpg image files embedding PHP payloads, designed to support PHP RCE polyglot techniques.


title: copyfail2-py
link: https://github.com/guiimoraes/copyfail2-py
pubDate: 2026-05-08 06:14:36
author: guiimoraes
keyword: CVE-2026
language: Python
description:
One-liner Python LPE for CVE-2026-31431 (CopyFail2). No compilation, no dependencies beyond Python+OpenSSL. Just curl | python3 and get root on Linux 6.5+.


title: next-16.2.4-pocs
link: https://github.com/dwisiswant0/next-16.2.4-pocs
pubDate: 2026-05-08 07:00:40
author: dwisiswant0
keyword: CVE-2026
language: Python
description:
Next.js v16.2.4 Security PoC Collection (CVE-2026-44578, CVE-2026-44574, CVE-2026-23870, GHSA-267c-6grr-h53f, GHSA-mg66-mrh9-m8jx, CVE-2026-44573, GHSA-gx5p-jg67-6x7h, GHSA-h64f-5h5j-jqjh, GHSA-wfc6-r584-vfw7, CVE-2026-44581, CVE-2026-44582, GHSA-3g8h-86w9-wvmq)


title: pocket-id
link: https://github.com/pocket-id/pocket-id
pubDate: 2024-08-12 02:57:32
author: pocket-id
keyword: POC
language: Go
description:
A simple and easy-to-use OIDC provider that allows users to authenticate with their passkeys to your services.


title: Rceattle
link: https://github.com/grantdadams/Rceattle
pubDate: 2017-12-26 07:27:58
author: grantdadams
keyword: RCE
language: R
description:
TMB based age-structured single- and multi-species model. Estimation, simulation, management strategy evaluation.


title: GenDataCode
link: https://github.com/Cathyqiii/GenDataCode
pubDate: 2026-05-08 11:32:50
author: Cathyqiii
keyword: 反序列化
language: Python
description:
GenDataCode是面向多元时间序列数据生成的开源工程化代码库，聚焦小样本、稀缺工况下的时序数据增强需求，内置实现了TimeGAN、TimeVAE等经典时序生成模型，并创新融合扩散模型与Mamba架构提出CTD-Mamba-Diff高效生成方法；库中集成...


title: sussyfinder
link: https://github.com/Cvar1984/sussyfinder
pubDate: 2023-06-02 18:23:44
author: Cvar1984
keyword: webshell
language: PHP
description:
Single file php webshell scanner to detect potentially malicious backdoor based on token and hash with web interface


title: L0ck
link: https://github.com/lopleec/L0ck
pubDate: 2026-05-08 12:57:31
author: lopleec
keyword: 未授权
language: Swift
description:
A security-first macOS encryption app that locks files into device-bound .l0ck containers using Keychain-backed keys, protected preview flows, and system-level safeguards against unauthorized deletion or movement.一款以安全为核心的 macOS 加密应用，使用钥匙串支持的密钥将文...


title: nextjs-basepath-i18n-next-data-middleware-bypass-poc
link: https://github.com/Federico1976/nextjs-basepath-i18n-next-data-middleware-bypass-poc
pubDate: 2026-05-08 14:45:24
author: Federico1976
keyword: POC
language: Shell
description:
Minimal local PoC for a Next.js Pages Router middleware matcher bypass affecting implicit default-locale _next/data routes with basePath and i18n.


title: l6o_1rce
link: https://github.com/lismyth/l6o_1rce
pubDate: 2026-05-08 14:22:05
author: lismyth
keyword: RCE
description:
Every new beginning means an opportunity for growth; pour passion into pursuing ideals and bloom dazzling brilliance in life.


title: rce_jhmg
link: https://github.com/studenttow/rce_jhmg
pubDate: 2026-05-08 14:21:12
author: studenttow
keyword: RCE
description:
Live with your heart; every detail can bring a different kind of emotion; let us harvest sweetness and warmth in the little things of life.


title: afalg-check
link: https://github.com/itsystem/afalg-check
pubDate: 2026-05-05 21:54:41
author: itsystem
keyword: CVE-2026
language: Go
description:
Утилита для Linux, которая проверяет доступность `AF_ALG`/`algif_aead` и помогает оценить риск по `CVE-2026-31431`.


title: pocket-cfo
link: https://github.com/616xold/pocket-cfo
pubDate: 2026-03-09 10:48:47
author: 616xold
keyword: POC
language: TypeScript
description:
Evidence-native finance mission control that turns raw exports and docs into a Finance Twin and CFO Wiki, then answers finance questions with decision-ready evidence packets.


title: Magic-World
link: https://github.com/goxs0105757/Magic-World
pubDate: 2026-02-25 04:58:44
author: goxs0105757
keyword: POC
language: Python
description:
🪄 Explore dynamic 3D video scenes interactively with MagicWorld using keyboard actions for smooth, consistent viewpoint transitions.


title: CVE_PushService
link: https://github.com/hijack1r/CVE_PushService
pubDate: 2025-08-30 18:10:00
author: hijack1r
keyword: POC
language: Python
description:
一款面向网络安全从业者的--漏洞实时情报自动推送工具 （An automatic push tool for real-time information of vulnerabilities for network security practitioners）


title: ansible-mitigate-copyfail-dirtyfrag
link: https://github.com/infiniroot/ansible-mitigate-copyfail-dirtyfrag
pubDate: 2026-05-08 20:26:13
author: infiniroot
keyword: CVE-2026
description:
Simple Ansible Playbook to mitigate against CopyFail (CVE-2026-31431) and DirtyFrag (CVE-2026-43284) vulnerabilities.


title: CVE-2026-31431
link: https://github.com/rvizx/CVE-2026-31431
pubDate: 2026-05-01 20:47:26
author: rvizx
keyword: CVE-2026
language: Shell
description:
CVE-2026-31431 - Copy Fail | Linux LPE via authencesn page cache write. Unprivileged user to root on most distros since 2017. PoC in C and Python.


title: Dirty-Frag-Kubernetes-PoC
link: https://github.com/Percivalll/Dirty-Frag-Kubernetes-PoC
pubDate: 2026-05-08 10:17:45
author: Percivalll
keyword: CVE-2026
language: C
description:
A proof-of-concept demonstrating how a default, unprivileged Kubernetes Pod can achieve node-level code execution on Amazon EKS by exploiting the Dirty Frag (CVE-2026-43284) Linux kernel page-cache corruption vulnerability through shared container image layers.


title: pagecache-guard
link: https://github.com/0xlane/pagecache-guard
pubDate: 2026-05-08 20:03:53
author: 0xlane
keyword: CVE-2026
language: Python
description:
Runtime integrity guard that detects and blocks Linux page cache tampering attacks (Copy Fail CVE-2026-31431, Dirty Pipe, Dirty COW) at execution time. Uses fanotify + O_DIRECT to protect SUID/SGID binaries from privilege escalation via page cache corruption.


title: ai-code-reviewer
link: https://github.com/liangz2955981345-dotcom/ai-code-reviewer
pubDate: 2026-05-08 17:19:19
author: liangz2955981345-dotcom
keyword: 漏洞检测
description:
AI Code Reviewer 是一个基于多Agent协作架构的代码审查与优化平台，通过四个专业Agent（CodeParser、SecurityAudit、PerformanceOptimizer、StyleChecker）按优先级顺序协同工作，结合长链推理能力对代码进行全方位分析——从AST结构解析、安全...


title: clickjacking-poc-generator
link: https://github.com/Krishi7q/clickjacking-poc-generator
pubDate: 2025-10-07 18:13:21
author: Krishi7q
keyword: POC
language: Python
description:
🔒 Generate HTML Proof of Concept files for clickjacking vulnerabilities to aid security researchers and testers in demonstrating potential attacks.


title: vulscanner
link: https://github.com/ryzecx/vulscanner
pubDate: 2025-09-27 15:59:34
author: ryzecx
keyword: POC
language: Python
description:
🔍 Scan for vulnerabilities with an AI-powered tool that enhances security in your development process, ensuring safety before production.


title: ai-voice-agent-claim-validation
link: https://github.com/Kerbie16/ai-voice-agent-claim-validation
pubDate: 2025-09-24 20:39:17
author: Kerbie16
keyword: POC
language: Python
description:
🎤 Build a serverless voice agent to validate insurance claims using Azure Functions and AI services, enhancing efficiency and user experience.


title: CVE-2025-32463_chwoot
link: https://github.com/ashardev002/CVE-2025-32463_chwoot
pubDate: 2025-09-20 08:42:07
author: ashardev002
keyword: POC
language: Shell
description:
🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.


title: CVE-2025-31258-PoC
link: https://github.com/sureshkumarsat/CVE-2025-31258-PoC
pubDate: 2020-06-23 23:20:11
author: sureshkumarsat
keyword: POC
language: Jupyter Notebook
description:
🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.


title: poc-ai-calorie-counter-app
link: https://github.com/ShafterFive/poc-ai-calorie-counter-app
pubDate: 2025-09-10 23:08:13
author: ShafterFive
keyword: POC
language: TypeScript
description:
🍽️ Track your calorie intake easily with this AI-powered app, designed to help you manage your diet and improve your nutrition.


title: DIRTYFAIL
link: https://github.com/KaraZajac/DIRTYFAIL
pubDate: 2026-05-08 22:05:37
author: KaraZajac
keyword: CVE-2026
language: C
description:
Detector + PoC for Linux page-cache write vulnerabilities: Copy Fail (CVE-2026-31431) and Dirty Frag (CVE-2026-43284/43500). Authorized security research only.


title: copyfail
link: https://github.com/rfxn/copyfail
pubDate: 2026-04-30 22:33:36
author: rfxn
keyword: CVE-2026
language: Python
description:
Defense-in-depth primitives for CVE-2026-31431 (Copy Fail) — kernel detection probe and LD_PRELOAD AF_ALG block


title: nifi-CVE-2026-39816-poc
link: https://github.com/ZeroPathAI/nifi-CVE-2026-39816-poc
pubDate: 2026-04-29 06:25:29
author: ZeroPathAI
keyword: CVE-2026
language: Python
description:
POC for CVE-2026-39816 which allows NiFi users without execute code permissions to run arbitrary scripts


title: iTopN8N
link: https://github.com/Black-Zeus/iTopN8N
pubDate: 2026-05-08 11:37:24
author: Black-Zeus
keyword: POC
language: Shell
description:
Docker Compose stack for n8n, iTop automation workflows, Mailpit, NocoDB and template-based report PoC.


title: ActiveMQ-EXPtools
link: https://github.com/Catherines77/ActiveMQ-EXPtools
pubDate: 2026-04-20 10:38:50
author: Catherines77
keyword: CVE-2026
language: Java
description:
Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466)


title: NetScan
link: https://github.com/zt382/NetScan
pubDate: 2026-05-09 11:59:54
author: zt382
keyword: 漏洞检测
language: Python
description:
NetScan网络安全资产扫描系统是一套轻量级的网络安全资产管理平台，基于纯 Python Socket 实现端口扫描和服务识别，无需依赖 Nmap 等外部工具。系统提供 Web 管理界面，支持资产发现、端口扫描、漏洞检测、报告生成等完整工作...


title: security-playbooks
link: https://github.com/secwexen/security-playbooks
pubDate: 2026-03-15 22:09:18
author: secwexen
keyword: POC
language: YARA
description:
Security Playbooks is a collection of MITRE ATT&CK-based attack scenarios, detection rules (Sigma, YARA, Suricata), PoC scripts, and hands-on lab walkthroughs for cybersecurity professionals and SOC analysts.


title: dr2_5poc
link: https://github.com/ankitseren/dr2_5poc
pubDate: 2026-05-09 15:01:15
author: ankitseren
keyword: POC
description:
Life is a process of pursuing with your heart; seize every today, create your own future, and let the soul be joyfully vibrant.


title: GPD-Pocket2-2019-Hackintosh
link: https://github.com/rowell1/GPD-Pocket2-2019-Hackintosh
pubDate: 2025-12-17 01:38:34
author: rowell1
keyword: POC
language: ASL
description:
Hackintosh EFI folder for GPD Pocket2 2019 (OpenCore 1.0.7 / Sequoia 15.7.5) with Wi-Fi 5 (802.11ac) and iGPU acceleration support.


title: accesskey_tools
link: https://github.com/kohlersbtuh15/accesskey_tools
pubDate: 2023-08-15 17:14:35
author: kohlersbtuh15
keyword: RCE
language: Python
description:
阿里云aliyun/腾讯云tencentcloud/华为云huaweicloud/aws等各种云厂商的accesskey运维安全工具，accesskey利用工具，包括但不限于创建ecs、ecs查询和命令执行、oss查询和批量下载等各种功能,aws accesskey rce;remote command execute


title: waku-i18n-poc
link: https://github.com/assisfery/waku-i18n-poc
pubDate: 2026-05-09 17:27:05
author: assisfery
keyword: POC
language: TypeScript
description:
This project is a proof of concept for i18n (internationalization) implementation with the Waku framework.


title: pocketed
link: https://github.com/ohwiredev/pocketed
pubDate: 2026-05-06 21:18:11
author: ohwiredev
keyword: POC
language: Python
description:
Pocketed is a sleek, modern web application designed to help you curate your personal video collection.


title: CVE-Hunter-2026
link: https://github.com/0dayexperience/CVE-Hunter-2026
pubDate: 2026-05-07 21:50:34
author: 0dayexperience
keyword: CVE-2026
language: Go
description:
Smart CVE validator for 2026: passive recon, tech stack detection, PoC matching. Built for pentesters and security researchers.


title: amrit-docs-mcp
link: https://github.com/zsklav/amrit-docs-mcp
pubDate: 2026-05-09 20:49:29
author: zsklav
keyword: POC
language: Python
description:
MCP server that indexes AMRIT repository docs and serves semantic search to AI agents. POC for C4GT DMP 2026 — AMRIT Agentic AI Coding Framework (#131).


title: pocket-steve
link: https://github.com/nathanvajdos/pocket-steve
pubDate: 2026-05-09 11:22:44
author: nathanvajdos
keyword: POC
language: JavaScript
description:
Pocket Steve - a memory trigger for the people you meet. Voice-first capture, photo OCR, calendar-driven recall.


title: wordpress-rce-vapt-cve-2020-25213
link: https://github.com/Cmadhushanka/wordpress-rce-vapt-cve-2020-25213
pubDate: 2026-05-09 20:43:51
author: Cmadhushanka
keyword: RCE
description:
Educational cybersecurity project demonstrating exploitation and mitigation of CVE-2020-25213 (WordPress File Manager Plugin RCE). Includes malware simulation, VAPT analysis, and security patch implementation in a controlled lab environment.


title: openclaw-security-monitor
link: https://github.com/adibirzu/openclaw-security-monitor
pubDate: 2026-02-05 15:31:07
author: adibirzu
keyword: CVE-2026
language: Shell
description:
Proactive security monitoring for OpenClaw deployments. Detects ClawHavoc, AMOS stealer, CVE-2026-25253, memory poisoning, and supply chain attacks.


title: vibe-coding-security
link: https://github.com/boxed-dev/vibe-coding-security
pubDate: 2026-05-02 06:48:32
author: boxed-dev
keyword: CVE-2026
description:
Before you tweet your launch — run these 47 checks. Same patterns behind the Lovable RLS CVE (170 apps, March 2025) and the Moltbook leak (1.5M API tokens, Feb 2026).


title: so-bopis-at-scale
link: https://github.com/seanorfila-shopify/so-bopis-at-scale
pubDate: 2026-05-09 09:28:13
author: seanorfila-shopify
keyword: POC
language: TypeScript
description:
BOPIS at Scale POC — FS locations + Carrier Service + Hydrogen/Oxygen. West Marine 250-store BOPIS/van/ship split on Shopify Plus.


title: sudo-chroot
link: https://github.com/Precault47/sudo-chroot
pubDate: 2025-03-30 17:28:36
author: Precault47
keyword: POC
language: Python
description:
🔒 Exploit local privilege escalation vulnerabilities in sudo before 1.9.17p1 using the chroot option for enhanced security assessments.


title: Aegis
link: https://github.com/ponydeerr/Aegis
pubDate: 2026-05-08 22:05:30
author: ponydeerr
keyword: RCE
description:
Aegis, a defensive mod for Black Ops III (Steam) that protects you against the lobby exploits people have been complaining about for years RCE vectors, crashers, name spoofs, malformed packets, profile corruption, and many more.


title: RAT-Vulnerabilities
link: https://github.com/SwezyDev/RAT-Vulnerabilities
pubDate: 2025-10-25 11:08:00
author: SwezyDev
keyword: RCE
language: Python
description:
A collection of exploit examples and PoCs inspired by vulnerabilities seen in RATs, for educational reverse‑engineering and exploit development.


title: fuzz
link: https://github.com/xsscx/fuzz
pubDate: 2015-02-01 10:06:13
author: xsscx
keyword: RCE
language: HTML
description:
Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT


title: Copy_Grail
link: https://github.com/cleozi/Copy_Grail
pubDate: 2026-05-10 07:36:35
author: cleozi
keyword: CVE-2026
language: C++
description:
Elegant C++ exploit for CVE-2026-31431 (Copy Fail) using AF_ALG authenticated encryption + splice(2) to overwrite setuid binary memory


title: bomdrift
link: https://github.com/Metbcy/bomdrift
pubDate: 2026-04-28 12:15:32
author: Metbcy
keyword: CVE-2026
language: Rust
description:
SBOM diff with supply-chain risk signals — flags new CVEs, typosquats, and young maintainers on changed deps. Built after axios (Mar 2026), Shai-Hulud, and xz.


title: DIRTY-FRAG-Detection-with-Wazuh-4.14.4
link: https://github.com/mym0us3r/DIRTY-FRAG-Detection-with-Wazuh-4.14.4
pubDate: 2026-05-08 21:57:27
author: mym0us3r
keyword: CVE-2026
description:
Wazuh 4.14.4 detection rules for CVE-2026-43284 / CVE-2026-43500 (Dirty Frag) - Linux Local Privilege Escalation via page cache write


title: dirtyfrag-arm64
link: https://github.com/linnemanlabs/dirtyfrag-arm64
pubDate: 2026-05-10 06:58:42
author: linnemanlabs
keyword: CVE-2026
description:
arm64/aarch64 port of V4bel/dirtyfrag (CVE-2026-43284). ESP-only - rxrpc path kernel-oopses on arm64 due to flush_dcache_page


title: TurboNodeIO
link: https://github.com/VTMETI/TurboNodeIO
pubDate: 2019-12-11 22:09:29
author: VTMETI
keyword: POC
language: TypeScript
description:
🚀 Boost Node.js performance with native C++ for File I/O and SIMD tasks, demonstrating significant speed increases over standard JavaScript implementations.


title: auth-cn
link: https://github.com/ProgrammerRayyan/auth-cn
pubDate: 2025-12-14 01:33:18
author: ProgrammerRayyan
keyword: POC
language: TypeScript
description:
🔐 Build authentication UI components easily with Auth CN, designed for Better Auth and fully customizable for your project's needs.


title: bnk-forge-kind-cluster
link: https://github.com/mwiget/bnk-forge-kind-cluster
pubDate: 2026-05-10 02:59:27
author: mwiget
keyword: POC
language: HCL
description:
Forge-ready content for installing F5 BNK on a kind cluster (developer/POC). Mirrors bnk-forge-ibm-roks-cluster minus IBM specifics.


title: Pocket_PSU
link: https://github.com/TheClaverOne/Pocket_PSU
pubDate: 2021-03-14 22:52:51
author: TheClaverOne
keyword: POC
language: HTML
description:
🔋 Build a mini PSU that fits in your pocket, delivering adjustable voltage and current with safe charging and protection from any USB-C source.


title: deepl-translation-poc
link: https://github.com/bigant27/deepl-translation-poc
pubDate: 2025-12-14 18:25:05
author: bigant27
keyword: POC
language: JavaScript
description:
🌍 Translate text quickly with DeepL's API in this proof-of-concept tool, featuring real-time results and support for 26 languages.


title: Rynex
link: https://github.com/user123-cry/Rynex
pubDate: 2025-12-11 13:37:46
author: user123-cry
keyword: POC
description:
🔍 Scan and exploit vulnerabilities effectively with Rynex, a Rust-based framework featuring a TOML-based PoC DSL for streamlined security testing.


title: AI-Powered-Legacy-Protection-POC
link: https://github.com/Sneaky-Pablo/AI-Powered-Legacy-Protection-POC
pubDate: 2025-12-11 07:42:45
author: Sneaky-Pablo
keyword: POC
language: TypeScript
description:
🛡️ Empower families with AI-driven legacy planning and legal guidance for Spanish speakers, ensuring accessibility and personalized support worldwide.


title: threat-intel-brief-cve-2026-42208-litellm
link: https://github.com/Zeltoc/threat-intel-brief-cve-2026-42208-litellm
pubDate: 2026-05-10 10:07:25
author: Zeltoc
keyword: CVE-2026
description:
Threat intelligence brief on CVE-2026-42208, a critical pre-auth SQL injection in BerriAI LiteLLM exploited within 36 hours of disclosure. Covers attack path, detection opportunities, and recommended actions.


title: abhinavagarwal07.github.io
link: https://github.com/abhinavagarwal07/abhinavagarwal07.github.io
pubDate: 2026-03-25 13:48:59
author: abhinavagarwal07
keyword: CVE-2026
language: C
description:
RingWraith: CVE-2026-33150 and CVE-2026-33179 — Use-After-Free and NULL Dereference in libfuse io_uring


title: chatgpt-plus-tutorial
link: https://github.com/lexxgpt/chatgpt-plus-tutorial
pubDate: 2025-12-07 17:18:05
author: lexxgpt
keyword: 未授权
description:
2026年国内如何安全订阅ChatGPT Plus？本终极指南深度剖析了五种主流支付路径：从最便捷的官方授权代充，到海外虚拟信用卡（VCC）和苹果礼品卡的DIY方案。我们提供详尽的优劣对比与安全操作指引，助您选择最适合的方案，轻...


title: doc-intel
link: https://github.com/Atharv-110/doc-intel
pubDate: 2026-05-08 06:33:32
author: Atharv-110
keyword: POC
language: TypeScript
description:
DocIntel is a POC showcasing Vectorless, Reasoning-Based RAG using the PageIndex SDK. It demonstrates how structured document reasoning can replace traditional vector similarity search, enabling faster, more explainable, and context-aware interactions with complex documents—without relying on Vec...


title: WPDetector
link: https://github.com/Aryoksss/WPDetector
pubDate: 2025-12-08 16:28:39
author: Aryoksss
keyword: webshell
language: PHP
description:
WordPress security plugin untuk mendeteksi konten judi online (judol) dan webshell dengan notifikasi Telegram real-time.


title: copyfail2_electric_boogaloo_fix
link: https://github.com/vorkampfer/copyfail2_electric_boogaloo_fix
pubDate: 2026-05-10 12:38:21
author: vorkampfer
keyword: CVE-2026
language: Shell
description:
A temporary mitigation against copy_fail variant (copyfail2_electric_boogaloo) - Unprivileged Linux LPE via xfrm ESP-in-UDP MSG_SPLICE_PAGES no-COW fast path. Page-cache write into any readable file. Overwrites a nologin line in /etc/passwd with sick::0:0:…:/:/bin/bash and sus into it. Same class...


title: gacc
link: https://github.com/hoyla/gacc
pubDate: 2026-05-08 00:53:02
author: hoyla
keyword: POC
language: Python
description:
Monitor China customs (GACC) releases and cross-reference with Eurostat to surface trade-pattern stories for journalism. Local POC stage.


title: Nburp
link: https://github.com/Amjad-Purple/Nburp
pubDate: 2026-05-10 17:41:36
author: Amjad-Purple
keyword: RCE
language: Python
description:
Nburp: A high-performance, futuristic Neon-themed security framework for web auditing. Featuring an automated vulnerability scanner (SQLi, XSS, RCE), a manual HTTP request repeater, and an intelligent fuzzer. Lightweight, API-driven, and built with Python/Flask for security researchers who value bo...


title: Porting-CVE-2026-31431-Copy-Fail-to-a-Constrained-Java-Runner
link: https://github.com/karollooool/Porting-CVE-2026-31431-Copy-Fail-to-a-Constrained-Java-Runner
pubDate: 2026-05-01 08:01:07
author: karollooool
keyword: CVE-2026
language: Python
description:
CVE-2026-31431 (copy.fail) — adapted for constrained Java execution environments via FFM syscall layer + javac   annotation processor delivery


title: agentbox
link: https://github.com/siyad01/agentbox
pubDate: 2026-05-10 15:42:07
author: siyad01
keyword: CVE-2026
description:
Open-source sandboxed runtime for AI agents — gVisor/Docker isolation,  credential vault, immutable audit log. Built after CVE-2026-25253.


title: poc-network-isolation
link: https://github.com/iamlucass/poc-network-isolation
pubDate: 2026-02-04 23:53:29
author: iamlucass
keyword: POC
language: TypeScript
description:
🌐 Isolate a Node.js service's network access using Docker and nginx as an egress proxy for enhanced security and control in your applications.


title: spring-batch-kafka-nats-poc
link: https://github.com/ulises5700/spring-batch-kafka-nats-poc
pubDate: 2026-02-04 08:49:10
author: ulises5700
keyword: POC
language: Java
description:
📡 Connect data streams seamlessly using Spring Batch with Kafka and NATS for efficient processing and reliable messaging in modern applications.


title: CVE-2026-41285-OpenBSD-v6daemons-go-brrr
link: https://github.com/Rat5ak/CVE-2026-41285-OpenBSD-v6daemons-go-brrr
pubDate: 2026-05-05 21:23:08
author: Rat5ak
keyword: CVE-2026
language: Python
description:
One IPv6 ND option with length zero. One missing check. Daemon walks backward and lives in the loop.  Reported to OpenBSD, fixed, CVE assigned.


title: SecurinKEV
link: https://github.com/00redbeer/SecurinKEV
pubDate: 2026-05-05 20:22:40
author: 00redbeer
keyword: POC
language: Python
description:
1,627 CVE exploit labs from Securin Known Exploited Vulnerabilities (KEV) dataset — PoCs, READMEs, Docker labs, CVSS-sorted priority list


title: ch_poc
link: https://github.com/vallamsetty/ch_poc
pubDate: 2026-04-26 21:09:04
author: vallamsetty
keyword: POC
language: Python
description:
ClickHouse distributed JOIN correctness experiments — six failure modes reproducible on a six-row dataset


title: pocket-agent
link: https://github.com/dogum/pocket-agent
pubDate: 2026-05-11 08:49:15
author: dogum
keyword: POC
language: TypeScript
description:
Local-first substrate where managed AI agents ingest your unstructured inputs and surface them as interactive artifacts. The same code, a unique app per user.


title: nekogram-proof-of-logging
link: https://github.com/Isahellavibrational698/nekogram-proof-of-logging
pubDate: 2026-04-27 03:29:10
author: Isahellavibrational698
keyword: POC
description:
Prove Nekogram logs phone numbers with an Xposed PoC for Android, showing the app sends a bot query on login


title: claude-code-poc
link: https://github.com/Benzylic-level459/claude-code-poc
pubDate: 2026-04-26 05:10:51
author: Benzylic-level459
keyword: POC
language: TypeScript
description:
Build a TypeScript CLI POC for AI-assisted coding with Claude API, tool calling, memory, and task workflow support


title: osp
link: https://github.com/amosahd/osp
pubDate: 2026-04-22 16:24:00
author: amosahd
keyword: POC
language: TypeScript
description:
Enable AI agents to discover, provision, and manage developer services with the Open Service Protocol (OSP)


title: CVE-2026-36981-Kernel-EoP-PoC
link: https://github.com/canomer/CVE-2026-36981-Kernel-EoP-PoC
pubDate: 2026-05-11 04:28:37
author: canomer
keyword: CVE-2026
language: C
description:
Project Date : Feb 2026 / Memory corruption vulnerability within the kernel driver of MiniTool. Demonstrates a debugger-assisted arbitrary kernel write primitive that can be leveraged toward privilege escalation.


title: CVE-2026-36980-Kernel-BSOD-DoS-PoC
link: https://github.com/canomer/CVE-2026-36980-Kernel-BSOD-DoS-PoC
pubDate: 2026-05-11 04:51:29
author: canomer
keyword: CVE-2026
language: Python
description:
Project Date : Feb 2026 / Discovered a buffer overflow vulnerability in the IOCTL handler of the kernel driver. The vulnerability allows an unprivileged local attacker to corrupt kernel pool memory, triggering an immediate system crash (BSOD) and Denial of Service.


title: VulnerabilitySystem
link: https://github.com/FBW-JNU/VulnerabilitySystem
pubDate: 2026-05-10 21:16:31
author: FBW-JNU
keyword: 漏洞检测
description:
论文《A Vulnerability Detection System Based on Fusion of Assembly Code and Source Code》的实验代码，实现了一种基于汇编代码与源代码融合的漏洞检测系统。可供相关领域对此感兴趣的研究人员用于快速复现，对基于汇编代码与源代码融合的...


title: campus-api-docs
link: https://github.com/yexinyii/campus-api-docs
pubDate: 2026-05-05 17:18:33
author: yexinyii
keyword: 未授权
language: Python
description:
分为两大模块，api 是高校脱敏接口文档集合，lab 是基于这些接口复刻的校园系统安全靶场，内置未授权访问、水平 / 垂直越权、参数篡改等典型漏洞，支持 Docker 一键部署，是接口渗透测试与安全实训的实战平台。


title: interactive-harness
link: https://github.com/hieutrtr/interactive-harness
pubDate: 2026-05-11 10:19:48
author: hieutrtr
keyword: POC
description:
PoC: HTML-interactive harness for claude-bridge — visually drive plan/architecture/ER-schema/etc. through browser instead of typing markdown


title: PocketDataVisualiser
link: https://github.com/vamsi-op/PocketDataVisualiser
pubDate: 2026-05-11 11:34:03
author: vamsi-op
keyword: POC
language: JavaScript
description:
Privacy-first, in-browser CSV data visualizer — drop a file, get intelligent chart suggestions instantly. No account, no server uploads.


title: nextjs-realistic
link: https://github.com/ryusuke06/nextjs-realistic
pubDate: 2026-05-11 15:01:02
author: ryusuke06
keyword: POC
language: TypeScript
description:
A Next.js standalone-output sample app (App Router, middleware, Tailwind) used as a build target for OCI Lambda PoC


title: relay_bypass_server
link: https://github.com/vincentng295/relay_bypass_server
pubDate: 2026-05-09 20:09:05
author: vincentng295
keyword: POC
language: Python
description:
[POC] A robust high-performance relay server designed to bypass network restrictions using Xray (VLESS Reality) and FRP Tunneling


title: mathema
link: https://github.com/prior89/mathema
pubDate: 2026-05-09 02:14:53
author: prior89
keyword: POC
language: TypeScript
description:
matheo · Korean math learning PoC. NestJS+Prisma backend, Vite/React frontend. 3-step distractor analysis, SM-2 spaced repetition, weighted unit recommendations, KO/EN bilingual, color-psychology palette.


title: CVE-2026-41940
link: https://github.com/anach-ai/CVE-2026-41940
pubDate: 2026-05-11 15:01:25
author: anach-ai
keyword: RCE
language: Python
description:
CVE-2026-41940 — cPanel/WHM Auth Bypass By Dr.Anach, CRLF injection in `cpsrvd` Basic auth handler → unauthenticated WHM API access → RCE as root. All cPanel since v11.40 affected.


title: web-login-js-burp-audit
link: https://github.com/tang51678/web-login-js-burp-audit
pubDate: 2026-05-11 17:55:32
author: tang51678
keyword: 未授权
description:
当用户提供 Web URL、登录页、H5/前端静态包、本地前端目录或备份包地址，并要求使用 Burp 访问分析、落地前端 JS、审计敏感信息/接口、做最小化验证并在当前工作目录输出 Markdown 报告时使用。重点适用于登录框渗透测试、前...


title: TimeClock
link: https://github.com/Godztayyab/TimeClock
pubDate: 2020-11-19 05:37:40
author: Godztayyab
keyword: POC
language: TypeScript
description:
🕒 Track employee hours and manage schedules seamlessly with the TimeClock system, built using Next.js and TypeScript for real-time efficiency.


title: pickle-ride
link: https://github.com/giriaryan694-a11y/pickle-ride
pubDate: 2026-05-11 16:25:47
author: giriaryan694-a11y
keyword: RCE
language: Python
description:
🥒 Educational PyTorch pickle deserialization RCE demo showing how malicious .pt model files can execute arbitrary code during unsafe loading with torch.load().


title: an4scan
link: https://github.com/mabt/an4scan
pubDate: 2026-03-13 21:50:51
author: mabt
keyword: webshell
language: Go
description:
Magento 2 Malware Scanner - Detect skimmers, backdoors, webshells, DB injections and suspicious files


title: vcheck
link: https://github.com/krisiasty/vcheck
pubDate: 2026-05-09 01:54:04
author: krisiasty
keyword: CVE-2026
language: Go
description:
Vulnerability detection and mitigation tool for Copy Fail and Dirty Frag bugs (CVE-2026-31431, CVE-2026-43284, CVE-2026-43500)


title: mcp-armor
link: https://github.com/studiomeyer-io/mcp-armor
pubDate: 2026-05-04 05:49:25
author: studiomeyer-io
keyword: CVE-2026
language: Rust
description:
Drop-in Rust sidecar for MCP servers — scans tool calls for prompt injection, validates Ed25519 manifest signatures, blocks marketplace-poisoning vectors. <5ms p99 overhead. Defense against OX Security MCP advisory (10+ CVEs, April 2026).


title: llmesh
link: https://github.com/furuse-kazufumi/llmesh
pubDate: 2026-05-05 17:56:05
author: furuse-kazufumi
keyword: POC
language: Python
description:
Security-first local LLM swarm over MCP with signed peer discovery, fail-closed validation, audit trails, and Docker-based PoC nodes.


title: POC-VueJSMongoDB
link: https://github.com/rundredoffi/POC-VueJSMongoDB
pubDate: 2025-03-27 15:59:42
author: rundredoffi
keyword: POC
language: Vue
description:
Ce projet est une preuve de concept (Proof of Concept - POC) utilisant Vue.js pour le frontend et MongoDB pour la gestion de la base de données. L'objectif est de démontrer comment ces technologies peuvent être intégrées pour créer une application web performante et scalable.


title: pump-devnet-vuln-poc
link: https://github.com/Run-lab/pump-devnet-vuln-poc
pubDate: 2026-05-11 21:02:39
author: Run-lab
keyword: POC
description:
Devnet PoC scripts for testing potential vulnerabilities in Pump.fun smart contracts for bounty submission. Includes full TS test for set_metaplex_creator and collect_creator_fee.


title: toboggan
link: https://github.com/n3rada/toboggan
pubDate: 2024-02-25 05:04:56
author: n3rada
keyword: RCE
language: Python
description:
🛝 Transforms any RCE into a functional dumb shell. Designed for constrained environments (e.g., firewalls) where traditional reverse shells are impractical.


title: ALeRCE_HackFest_2026
link: https://github.com/pabblet/ALeRCE_HackFest_2026
pubDate: 2026-05-11 19:56:57
author: pabblet
keyword: RCE
language: Jupyter Notebook
description:
Small project searching for Supermassive Black Hole Binaries (SMBHB) in AGN using the ALeRCE broker.


title: Dictation
link: https://github.com/fatshin/Dictation
pubDate: 2026-04-19 12:49:56
author: fatshin
keyword: POC
language: Rust
description:
Free, local-first AI dictation for macOS and Windows. Auditable, offline-first, privacy by design. [Pre-PoC]


title: ThreadObservabilityPOC
link: https://github.com/DarinShapiroMS/ThreadObservabilityPOC
pubDate: 2026-05-12 02:16:59
author: DarinShapiroMS
keyword: POC
language: Python
description:
An add on app for Home Assistant that makes Thread network monitoring and troubleshooting much easier


title: snowflake-employee-experience-chatbot
link: https://github.com/saurabh-oss/snowflake-employee-experience-chatbot
pubDate: 2026-05-11 23:19:48
author: saurabh-oss
keyword: POC
language: JavaScript
description:
AI-powered employee experience chatbot PoC built on Snowflake Cortex Search, Cortex Analyst, and Cortex COMPLETE. NL → HR data, leave, IT tickets, team analytics. FastAPI + React.


title: CVE-2026-41940
link: https://github.com/murrez/CVE-2026-41940
pubDate: 2026-05-07 05:59:11
author: murrez
keyword: CVE-2026
language: Python
description:
PoC for CVE-2026-41940: WHM/cPanel authentication bypass chain (Python 2.7). For authorized security research and testing only.


title: kernel-security-patches
link: https://github.com/MethodWhite/kernel-security-patches
pubDate: 2026-05-03 02:11:50
author: MethodWhite
keyword: CVE-2026
language: Shell
description:
Linux Kernel Security Patches & Analysis - CVEs 2026 - Includes custom kernel for NVIDIA CUDA support


title: 3Deflatten
link: https://github.com/ThreeDeeJay/3Deflatten
pubDate: 2026-03-04 11:35:52
author: ThreeDeeJay
keyword: POC
language: C++
description:
[AI POC - STATUS: WORKING AT FULL SPEED] DirectShow filter to convert 2D videos to 3D SBS for common media players (which support external filters) in real-time.


title: rbac-ai-chatbot
link: https://github.com/jariwalaketan2/rbac-ai-chatbot
pubDate: 2026-04-28 20:50:58
author: jariwalaketan2
keyword: POC
language: Jupyter Notebook
description:
Multi-tenant AI chatbot POC with RBAC/ABAC enforcement, tool-based orchestration, and Neon Postgres — built with Next.js 15 and Vercel AI SDK v5


title: tanstack-compromise-checker
link: https://github.com/ry-allan/tanstack-compromise-checker
pubDate: 2026-05-12 17:11:30
author: ry-allan
keyword: CVE-2026
language: Shell
description:
Detects CVE-2026-45321 (TanStack supply chain compromise) and Mini Shai-Hulud worm artifacts. Scans node_modules, lockfiles, persistence hooks (Claude Code, VS Code, systemd, LaunchAgent), GitHub workflows, git history, C2 domains, and AI tool configs.


title: ARL-Source-Install
link: https://github.com/wpsec/ARL-Source-Install
pubDate: 2025-01-21 14:29:04
author: wpsec
keyword: 漏洞检测
language: JavaScript
description:
基于 ARL 深度扩展与持续优化的互联网资产自动化收集平台，面向资产发现、暴露面梳理、风险排查与持续监测等场景，提供域名识别、子域名发现、测绘引擎查询、端口与服务识别、指纹分析、URL 提取、漏洞检测、计划任务...


title: aidra-feasibility-study
link: https://github.com/RadW2020/aidra-feasibility-study
pubDate: 2026-04-27 04:07:03
author: RadW2020
keyword: POC
language: Python
description:
Feasibility study (PoC) on in-orbit AI for vessel detection in SAR — inspired by SatCen tender SATCEN/2026/OP/0003. Side project, not operational.


title: Postgresql-Research-Project
link: https://github.com/Noor-Fatima-Usmani/Postgresql-Research-Project
pubDate: 2026-05-12 20:08:59
author: Noor-Fatima-Usmani
keyword: webshell
language: Jupyter Notebook
description:
PostgreSQL security research project exploring Unix-domain socket abuse, covert database communication, and ML-based webshell detection for analyzing defense evasion techniques and network monitoring bypasses.


title: PocketVibe
link: https://github.com/s1161863-creator/PocketVibe
pubDate: 2026-05-12 22:35:48
author: s1161863-creator
keyword: POC
language: Python
description:
Two-round LoRA fine-tuning of Qwen2.5-Coder-1.5B for Chinese-to-mobile-HTML code generation (INT6138 Project II, EdUHK).


title: prcast
link: https://github.com/tobibytes/prcast
pubDate: 2026-05-11 18:30:38
author: tobibytes
keyword: POC
language: TypeScript
description:
Turn a GitHub Pull Request into a short-form video script and an AI voiceover. POC built with Next.js, Claude, and ElevenLabs.


title: issabel-lab
link: https://github.com/lordzzed/issabel-lab
pubDate: 2026-05-13 08:27:13
author: lordzzed
keyword: RCE
description:
Laboratório de pentest em ambiente VoIP controlado. Cobre exploração de RCE no Asterisk Dialplan e escalação de privilégios via binário SUID mal configurado, com guia de mitigação e conceitos Defense in Depth.


title: scan-shai-hulud
link: https://github.com/qi-scape/scan-shai-hulud
pubDate: 2026-05-13 04:18:18
author: qi-scape
keyword: CVE-2026
language: Shell
description:
Detect CVE-2026-45321 Mini Shai-Hulud supply chain compromise — scans for 170 npm + 2 PyPI poisoned packages across TanStack, Mistral AI, UiPath, OpenSearch, Guardrails AI


title: movement-segmentation-poc
link: https://github.com/Constricting-seedsman397/movement-segmentation-poc
pubDate: 2026-04-18 07:24:46
author: Constricting-seedsman397
keyword: POC
language: Jupyter Notebook
description:
Integrate dense instance segmentation masks into movement for better 2D tracking and occlusion handling


title: bug-bounty-hunting-agent
link: https://github.com/hijrahassalam/bug-bounty-hunting-agent
pubDate: 2026-05-13 11:05:16
author: hijrahassalam
keyword: RCE
language: Shell
description:
AI-Powered Bug Bounty Hunting Knowledge Base — battle-tested techniques from real findings on Matomo, Jetpack, WooCommerce, Shopware, Magento


title: SplicePrivillegeEscalationFIX
link: https://github.com/DroPZsec/SplicePrivillegeEscalationFIX
pubDate: 2026-05-13 10:01:30
author: DroPZsec
keyword: CVE-2026
language: Shell
description:
this little script blocks the new splice-ram-privlilleg ecalation fastly befor the contributers do it ( CVE-2026-31431)  (CopyFail fix)


title: api-chaos-tester
link: https://github.com/nexorin9/api-chaos-tester
pubDate: 2026-05-13 11:22:46
author: nexorin9
keyword: 漏洞检测
language: Python
description:
用混沌工程思路对医院核心系统（HIS/EMR/LIS/PACS）接口契约做反事实测试，自动生成空值、超长、特殊字符等边界用例，检测 SQL 注入/XSS/参数校验漏洞，输出端点/参数/规则三维覆盖率报告与漏洞清单，支持 CLI 彩色输出和 HTML ...


title: CVE-2026-41940-POC-Exploit
link: https://github.com/tc4dy/CVE-2026-41940-POC-Exploit
pubDate: 2026-05-12 22:47:21
author: tc4dy
keyword: CVE-2026
language: Python
description:
🚀 CVE-2026-41940 cPanel/WHM Auth Bypass Exploit - Best Flow 💥 CRLF injection leads to auth bypass, session hijacking & account leak. ✅ Proxy, custom UA, keep-alive, retries, SSL verify, colored output, file save support. ⚡ Advanced PoC for pentesters. 


title: museum-ai-metadata-pipeline
link: https://github.com/YIN-Renlong/museum-ai-metadata-pipeline
pubDate: 2026-05-13 17:19:59
author: YIN-Renlong
keyword: POC
language: Python
description:
This repository contains the Proof of Concept (PoC) for the automated metadata generation pipeline discussed in my course paper. 


title: PoCs
link: https://github.com/Halim45/PoCs
pubDate: 2017-11-17 00:11:52
author: Halim45
keyword: POC
description:
🔍 Explore proof of concept exploits for software vulnerabilities I've discovered and responsibly disclosed, aimed at educational use.


title: pseudentity-poc
link: https://github.com/uhhhhhhidunno/pseudentity-poc
pubDate: 2025-07-30 23:48:37
author: uhhhhhhidunno
keyword: POC
language: MDX
description:
🛠️ Build deterministic identities effortlessly with Pseudentity, a stateless Identity Provider for the pseudata ecosystem, ideal for mock identity solutions.


title: way2poc_cve-2026-34475
link: https://github.com/bitbcybr/way2poc_cve-2026-34475
pubDate: 2026-04-30 21:04:21
author: bitbcybr
keyword: CVE-2026
description:
Two-stage Nuclei detection for CVE-2026-34475: fingerprint vulnerable Varnish instances, verify cache-key collision behavior, and confirm exploitability via VCL inspection - unfortunetly without triggering the bug and exploitation


title: CVE-2026-31156
link: https://github.com/unicorn-hyh/CVE-2026-31156
pubDate: 2026-05-13 16:34:45
author: unicorn-hyh
keyword: CVE-2026
description:
There is a path injection vulnerability in OpenPLC-v3, which arises from the program not performing any validity checks on the file path parameters passed in from the command line. Attackers can read any readable file by constructing malicious paths, posing a risk of information leakage.


title: deen-pocket-dzikir-pagi-petang
link: https://github.com/ulabimbim/deen-pocket-dzikir-pagi-petang
pubDate: 2026-05-13 21:01:23
author: ulabimbim
keyword: POC
description:
PWA ringan untuk membaca dzikir pagi dan petang secara berurutan, lengkap dengan counter, daftar dzikir, rujukan, dan dukungan offline.


title: heartbeat-poc
link: https://github.com/ibam9573/heartbeat-poc
pubDate: 2025-10-27 11:18:57
author: ibam9573
keyword: POC
language: C#
description:
💓 Monitor distributed processes with a .NET 8 API, enabling real-time heartbeat tracking and lifecycle management for async tasks and background operations.


title: claude-code-mcp-rce
link: https://github.com/Lyther/claude-code-mcp-rce
pubDate: 2026-05-13 20:08:45
author: Lyther
keyword: RCE
description:
Acknowledgements: A sincere thank you to the Anthropic. By suspending my account without human review for an entire week, you gave me the uninterrupted focus I needed to fully reverse-engineer Claude Code’s MCP and ship a clean, reproducible minor RCE issue. Couldn’t have done it without your "...


title: livewire-honeypot
link: https://github.com/HelgeSverre/livewire-honeypot
pubDate: 2026-04-10 17:21:26
author: HelgeSverre
keyword: RCE
language: Python
description:
High-interaction honeypot mimicking a vulnerable Laravel/Livewire app. Captures RCE exploits and webshells targeting CVE-2024-47823, CVE-2025-54068, and CVE-2025-14894, then analyzes them in sandboxed Docker containers to extract IOCs.


title: ExtUp
link: https://github.com/ProdigiumAcademy/ExtUp
pubDate: 2026-05-13 19:17:31
author: ProdigiumAcademy
keyword: webshell
language: Shell
description:
ExtUp é uma ferramenta automatizada para testar extensões de arquivo em sistemas de upload vulneráveis. Ela ajuda a identificar quais extensões são aceitas, se o arquivo é realmente salvo no servidor e se o código PHP é executado (webshell).


title: mini-shai-hulud-scanner
link: https://github.com/Intrudify/mini-shai-hulud-scanner
pubDate: 2026-05-13 19:12:50
author: Intrudify
keyword: CVE-2026
language: Python
description:
Scanner for the Mini Shai-Hulud npm/PyPI supply chain worm (NHS CC-4781 · CVE-2026-45321). Detects gh-token-monitor persistence, payload artefacts, and attacker commits. Python, Bash, PowerShell.


title: compliance-suite-mcp
link: https://github.com/Crow0077/compliance-suite-mcp
pubDate: 2026-05-14 05:33:10
author: Crow0077
keyword: CVE-2026
language: Python
description:
Enterprise compliance & audit MCP server — CIS benchmarks, CVE scanning, port/firewall/SSH audits, cryptographic audit trail, SOC 2 evidence export. Built for the 2026 MCP Enterprise Readiness roadmap. 7 tools.


title: CVE-2026-40369-EXPLOIT
link: https://github.com/orinimron123/CVE-2026-40369-EXPLOIT
pubDate: 2026-05-14 04:56:15
author: orinimron123
keyword: CVE-2026
language: C++
description:
Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render process sandbox


title: CA_RAG_POC
link: https://github.com/PoyBoi/CA_RAG_POC
pubDate: 2026-05-12 10:40:08
author: PoyBoi
keyword: POC
language: Python
description:
Showcase of implemention of a local RAG pipeline with demonstrated ingestion of raw textual data, generation of embeddings, and semantic searching


title: cve-2026-45185-detection-script
link: https://github.com/materaj2/cve-2026-45185-detection-script
pubDate: 2026-05-14 11:57:22
author: materaj2
keyword: CVE-2026
language: Lua
description:
These detection scripts are property of the SECPlayground Platform.  Two safe detection scripts. Neither drives the close_notify-mid-BDAT trigger, so they will not crash the daemon or leave panic-log entries.  Both verdicts are "likely vulnerable" — distinguishing GnuTLS from OpenSSL builds remot...


title: machine-learning
link: https://github.com/sanjanb/machine-learning
pubDate: 2025-08-10 14:27:43
author: sanjanb
keyword: POC
language: Jupyter Notebook
description:
This repo will be the documentation part of my learning and going deep inside the concepts of machine learnig, Trying hard to learn and diving completely into it.


title: pocket-assistant
link: https://github.com/abinsaji2008/pocket-assistant
pubDate: 2026-05-14 15:00:38
author: abinsaji2008
keyword: POC
description:
Pocket assistant is small device like alexa but more advance feature like your bicycle speed and distance monitoring ,song control, appliance device controlling,etc


title: quant-poc-multi-asset
link: https://github.com/Yesol-Pilot/quant-poc-multi-asset
pubDate: 2026-05-14 14:12:40
author: Yesol-Pilot
keyword: POC
description:
AI-Native Multi-Asset Quant Portfolio: Honest Failure Report from a 1-Person Builder. 38-day Crypto PoC -> 12-week 4-asset-class rebuild. Production-grade. Open Source. Academic-rigorous.


title: vulnerability-disclosures
link: https://github.com/chndlrx/vulnerability-disclosures
pubDate: 2025-09-20 07:08:22
author: chndlrx
keyword: RCE
language: JavaScript
description:
Public disclosures of software vulnerabilities discovered and responsibly reported by Chandler Johnson. Includes CVEs, technical writeups, and proof-of-concepts.


title: Prelude-in-C
link: https://github.com/alienfxfiend/Prelude-in-C
pubDate: 2022-09-22 04:30:37
author: alienfxfiend
keyword: RCE
language: C++
description:
xL AUX *~My Journey Into Programming~* *~My Learning Path~* *~Diary Of A Reverse Engineer~* *~Legacy of RCE Chronicles & Code Mastery~* *~Gdev Kdev Primer Sysdev 101 Capture The Flag CTF Macro Excerpt [Codemasters]~* *~Steep Learning Curve~* :comet: —Cybernetic Crew  Brb乇√iレ◥Çレ₳Ñ◤


title: ai-xray
link: https://github.com/NKingpp/ai-xray
pubDate: 2026-05-14 15:24:04
author: NKingpp
keyword: 漏洞检测
description:
小爱同学写的，基于 Golang 开发的被动式 Web 漏洞扫描工具，核心对标 chaitin/xray 被动扫描能力，完全抛弃传统 POC / 规则引擎，采用大模型 AI作为核心漏洞检测引擎，配套Web 可视化前端实现扫描参数配置、流量管理、漏洞结果展...


title: process2diagram
link: https://github.com/pedroregato/process2diagram
pubDate: 2026-03-04 18:59:13
author: pedroregato
keyword: POC
language: Python
description:
POC em Streamlit compreendendo desde a entrada de uma transcrição da reunião e passasse pelo todo o pipeline de depuração até entregar o diagrama


title: eth-price-poc
link: https://github.com/mayGBUgiri/eth-price-poc
pubDate: 2026-05-14 17:55:42
author: mayGBUgiri
keyword: POC
language: JavaScript
description:
Live ETH/USDC block-level price + depth bookmap. Bellman-Ford routing across ~4,600 Ethereum pools via Fynd.


title: azure-local-virtual-deployment-skill
link: https://github.com/koudaiii/azure-local-virtual-deployment-skill
pubDate: 2026-05-14 18:27:18
author: koudaiii
keyword: POC
description:
A skill that provides an end-to-end, battle-tested walkthrough for deploying a single-node Azure Local (formerly Azure Stack HCI) cluster in a nested virtualization environment on an Azure VM — for lab, learning, and PoC use.


title: argus-ml
link: https://github.com/giriaryan694-a11y/argus-ml
pubDate: 2026-05-13 15:24:18
author: giriaryan694-a11y
keyword: RCE
language: Python
description:
AI/ML supply chain security scanner for detecting malicious payloads, unsafe deserialization, and hidden RCE inside model files like Pickle, PyTorch, and more.


title: CVE-2026-8181
link: https://github.com/zycoder0day/CVE-2026-8181
pubDate: 2026-05-14 20:13:08
author: zycoder0day
keyword: CVE-2026
language: Python
description:
CVE-2026-8181 - Burst Statistics 3.4.0-3.4.1.1 Unauthenticated Authentication Bypass to Admin Account Takeover | Proof of Concept


title: nginx-rift-scanner
link: https://github.com/enclave-ai/nginx-rift-scanner
pubDate: 2026-05-14 19:43:53
author: enclave-ai
keyword: CVE-2026
language: Python
description:
Scanner for CVE-2026-42945 — nginx heap overflow via rewrite+set is_args mismatch (affects nginx 0.6.27–1.30.0)


title: render-domains-mcp
link: https://github.com/amerry19/render-domains-mcp
pubDate: 2026-05-14 07:29:01
author: amerry19
keyword: POC
language: TypeScript
description:
MCP server for Render custom domain management — closes the agent-loop gap in Render's official MCP. POC built for a Growth EM interview.


title: inbound-carrier-sales
link: https://github.com/heartr8dev/inbound-carrier-sales
pubDate: 2026-05-13 14:10:13
author: heartr8dev
keyword: POC
language: Python
description:
Inbound carrier sales POC for HappyRobot FDE technical challenge — voice agent, FastAPI, visx dashboard, SSE live push


title: boost_log_python_poc
link: https://github.com/stephengtuggy/boost_log_python_poc
pubDate: 2023-04-01 03:48:51
author: stephengtuggy
keyword: POC
language: Shell
description:
Minimal reproducible example of how to use Boost.Python, Boost.Log, CMake, and vcpkg together in a C++11 program on Windows


title: Shells-X
link: https://github.com/vektor-x-com/Shells-X
pubDate: 2026-03-27 23:51:29
author: vektor-x-com
keyword: webshell
language: JavaScript
description:
Modular single-file web shell framework with pure-PHP recon, SOCKS5 pivoting, and per-build fingerprinting


title: CVE-2026-23416-POC
link: https://github.com/bluedragonsecurity/CVE-2026-23416-POC
pubDate: 2026-04-02 22:51:03
author: bluedragonsecurity
keyword: CVE-2026
language: C
description:
POC for CVE-2026-23416 (linux kernel 6.17 – linux kernel 7 rc5) - vulnerability discovered by Antonius


title: navgurukul-placement-dashboard
link: https://github.com/theemubin/navgurukul-placement-dashboard
pubDate: 2026-01-10 21:46:51
author: theemubin
keyword: POC
language: JavaScript
description:
Placement Management Dashboard for Navgurukul - Multi-role system with Student, Campus POC, Coordinator, and Manager roles


title: claude-interactive-ci
link: https://github.com/xAlcahest/claude-interactive-ci
pubDate: 2026-05-14 21:11:40
author: xAlcahest
keyword: POC
language: Shell
description:
PoC: Run Claude Code as an interactive session in GitHub Actions via tmux. Because the interactive/programmatic distinction is a policy fiction, not a technical boundary.


title: instabid-live
link: https://github.com/SiteHypeInc/instabid-live
pubDate: 2026-05-10 22:35:39
author: SiteHypeInc
keyword: POC
language: TypeScript
description:
InstaBid Live — LiveKit + Next.js video walk for the Sailboat POC. Contractor + homeowner + AI on a video call.


title: damn-vulnerable-defi-v4-solutions
link: https://github.com/ilainy/damn-vulnerable-defi-v4-solutions
pubDate: 2026-04-24 01:19:31
author: ilainy
keyword: POC
description:
Solutions & Writeups for Damn Vulnerable DeFi (Official), the most popular Web3/DeFi security practice lab. Focus on solidity vulnerability analysis, attack PoC, audit thinking and secure coding. For job hunting, audit learning and CTF prep.


title: CVE-2026-8181
link: https://github.com/murrez/CVE-2026-8181
pubDate: 2026-05-15 17:35:52
author: murrez
keyword: CVE-2026
language: Python
description:
CVE-2026-8181 PoC: Burst Statistics (3.4.0–3.4.1.1) authentication bypass. Python tool — single & multi-target scans, threaded workers, TXT reports. Authorized testing only. Maintainer: mürrez.


title: DNS-Mayhem-CVE-2026-41096-Deep-Dive
link: https://github.com/mrk336/DNS-Mayhem-CVE-2026-41096-Deep-Dive
pubDate: 2026-05-15 15:30:24
author: mrk336
keyword: CVE-2026
description:
In‑depth technical analysis of CVE‑2026‑41096, a critical heap overflow in Windows DNSAPI.dll enabling remote code execution via crafted DNS responses. Includes attack vectors, patch insights, and defensive guidance for security teams.


title: WaSonar
link: https://github.com/adamchabchi/WaSonar
pubDate: 2026-01-03 09:46:19
author: adamchabchi
keyword: POC
language: JavaScript
description:
🔍 Track and test WhatsApp devices easily with WaSonar, a CLI tool for educational research and security analysis, leveraging Baileys.


title: CVE-2026-42897
link: https://github.com/atiilla/CVE-2026-42897
pubDate: 2026-05-15 19:24:36
author: atiilla
keyword: CVE-2026
language: PowerShell
description:
CVE-2026-42897 - Exchange Health Checker blind spot: outbound IIS URL Rewrite rules silently ignored, making EOMT mitigations invisible in diagnostic reports.


title: VKS3D
link: https://github.com/ThreeDeeJay/VKS3D
pubDate: 2026-03-01 16:01:14
author: ThreeDeeJay
keyword: POC
language: C
description:
[AI POC - HOOKS AND RENDERS SBS/TAB, BUT BROKEN/SLOW/FLAT STEREO] Universal stereoscopic 3D Vulkan driver


title: subflow
link: https://github.com/martavoi/subflow
pubDate: 2026-05-09 23:31:45
author: martavoi
keyword: POC
language: Go
description:
Minimal Temporal-based subscription lifecycle POC in Go. Durable workflows replace polling schedulers; signals, queries, and named retry policies.


title: Advantech-ECU-150v2-manifest
link: https://github.com/myrtlecranial161/Advantech-ECU-150v2-manifest
pubDate: 2026-05-12 15:30:46
author: myrtlecranial161
keyword: POC
description:
Manage the Yocto Project build environment for Advantech ECU-150v2 hardware with this manifest repository.


title: vlnr
link: https://github.com/Gracephotovoltaic124/vlnr
pubDate: 2026-05-05 08:37:53
author: Gracephotovoltaic124
keyword: POC
description:
Automate Python security research with an LLM agent that scans, exploits, and validates PyPI packages in isolated pipelines.


title: DeFi-Security-Incident
link: https://github.com/kismp123/DeFi-Security-Incident
pubDate: 2026-03-20 15:06:50
author: kismp123
keyword: POC
description:
real-world DeFi security incidents (2020–2026) with root cause analysis, attack flow, on-chain source code, and PoC exploits. Covers flash loans, reentrancy, oracle               manipulation, access control, bridge hacks, and more — organized by year and vulnerability type.


title: indicadores-tradingview-1-
link: https://github.com/adrian884hub/indicadores-tradingview-1-
pubDate: 2026-05-16 11:30:00
author: adrian884hub
keyword: POC
description:
Indicador Pine Script para TradingView. Detección automática de soportes y resistencias con scoring, Volume Profile (POC/VAH/VAL) y señales de compra/venta por confluencia. 


title: CVE-2026-8181
link: https://github.com/Jenderal92/CVE-2026-8181
pubDate: 2026-05-16 10:50:28
author: Jenderal92
keyword: CVE-2026
language: Python
description:
CVE-2026-8181: Burst Statistics Auth Bypass → REST API takeover & admin creation. Python 2.7. Educational use only.


title: Open-Audit
link: https://github.com/elegent-administrator/Open-Audit
pubDate: 2026-05-16 11:36:44
author: elegent-administrator
keyword: 漏洞检测
language: Python
description:
Open Audit是面向企业研发、开发者群体的AI智能明文代码安全审计工具，基于Python语言开发、FastCGI架构搭建，融合Semgrep工具链与自主研发的AI Agent，精准匹配数字时代代码安全审计的市场核心需求。工具直击行业传统审计工具误...


title: Web-Security-Lab-Reports
link: https://github.com/Mehed1-Hasan33/Web-Security-Lab-Reports
pubDate: 2026-05-16 14:51:50
author: Mehed1-Hasan33
keyword: POC
language: PHP
description:
A comprehensive security assessment report on SQL Injection vulnerability within the DVWA environment, including lab setup and Proof of Concept (PoC).


title: ai-security-log-triage-assistant
link: https://github.com/aphidach/ai-security-log-triage-assistant
pubDate: 2026-05-16 10:05:48
author: aphidach
keyword: POC
language: TypeScript
description:
A measurable POC for security log triage using synthetic datasets, heuristic baselines, structured evaluation, and small-model fine-tuning.


title: clipboard-poc
link: https://github.com/AllreadyTaken/clipboard-poc
pubDate: 2026-05-16 18:03:21
author: AllreadyTaken
keyword: POC
language: HTML
description:
Proof that Navigator.clipboard doesnt have an 8k char limit. There isnt even something like that in the W3C Spec.


title: CVE-2026-6433
link: https://github.com/murrez/CVE-2026-6433
pubDate: 2026-05-16 17:29:58
author: murrez
keyword: RCE
language: Python
description:
PoC for CVE-2026-6433: WordPress FlipperCode Custom CSS, JS & PHP (≤2.0.7) — unauthenticated SQLi to RCE. Python 3 stdlib; single target or bulk multi-threaded scanning. Authorized testing & research only.


title: RCE-Company-Profile
link: https://github.com/asarimuh/RCE-Company-Profile
pubDate: 2026-05-16 12:34:00
author: asarimuh
keyword: RCE
language: CSS
description:
Company Profile website that I'm building for Rising Creators Entertainment which is a subsidiary of PT Vixicom Teknologi Indonesia


title: apache_audit_cve-2026-23918
link: https://github.com/sibersan/apache_audit_cve-2026-23918
pubDate: 2026-05-16 17:18:34
author: sibersan
keyword: RCE
language: Python
description:
Python toolkit to audit Apache HTTP Server against CVE-2026-23918 (HTTP/2 double-free RCE) and 4 related CVEs. Passive scanner with ALPN verification + read-only local auditor. No exploits.


title: tanstack-compromise-checker
link: https://github.com/fabriziosalmi/tanstack-compromise-checker
pubDate: 2026-05-16 16:01:40
author: fabriziosalmi
keyword: CVE-2026
language: Shell
description:
Shell script to detect TanStack npm supply chain attack indicators (CVE-2026-45321 / GHSA-g7cv-rxg3-hmpx)


title: web-server-audit_CVE-2026-42945
link: https://github.com/sibersan/web-server-audit_CVE-2026-42945
pubDate: 2026-05-16 17:06:53
author: sibersan
keyword: CVE-2026
language: Python
description:
Trigger-aware web server CVE audit for nginx and Apache. Goes beyond version matching by checking whether the vulnerable code path is actually reachable in your configuration. Classifies findings as Active / Latent / Unverified. Single-file Python 3.5+, no dependencies.


title: shai-scan
link: https://github.com/digi4care/shai-scan
pubDate: 2026-05-16 17:06:25
author: digi4care
keyword: CVE-2026
language: TypeScript
description:
Zero-dependency CLI scanner for npm/PyPI supply chain compromises. Detects compromised packages in lockfiles and system-level IOCs from attacks like Mini Shai-Hulud (CVE-2026-45321).


title: PlayWright-Framework-PoC
link: https://github.com/SamEricBailey/PlayWright-Framework-PoC
pubDate: 2026-01-07 21:23:51
author: SamEricBailey
keyword: POC
language: TypeScript
description:
🚀 Build and run a scalable Playwright automation framework in TypeScript for UI, API, and performance testing, embracing Shift Left practices.


title: Pocket
link: https://github.com/chrisgen19/Pocket
pubDate: 2026-05-14 12:10:22
author: chrisgen19
keyword: POC
language: TypeScript
description:
The primary goal of the app is to allow users to save URLs (web links) so they can revisit them later. It provides a clean, organized interface to manage a personal library of web content.


title: PoCWatch
link: https://github.com/jwedtan/PoCWatch
pubDate: 2026-04-25 23:36:25
author: jwedtan
keyword: POC
language: TypeScript
description:
A live triage dashboard for newly published CVEs, enriched with EPSS exploit-likelihood scores, NVD reference tags, affected products, and links to public proof-of-concept repositories on GitHub.


title: pocket-dating-coach
link: https://github.com/sreme19/pocket-dating-coach
pubDate: 2026-05-02 21:13:30
author: sreme19
keyword: POC
language: Svelte
description:
AI-powered dating coach in your pocket — get personalized advice, message suggestions, and conversation feedback. Built with SvelteKit, TypeScript, and Supabase.


title: Vue-mitm-poc
link: https://github.com/hossamesam/Vue-mitm-poc
pubDate: 2022-06-13 05:28:23
author: hossamesam
keyword: POC
language: Dart
description:
🌐 Inject Vue.js into PS4 version 1.01 using MITM techniques for proof of concept and exploration of application behavior.


title: PocketFlow-Zig
link: https://github.com/villcaf175/PocketFlow-Zig
pubDate: 2026-01-04 08:54:55
author: villcaf175
keyword: POC
language: Zig
description:
🚀 Build LLM-powered workflows with PocketFlow-Zig, a lightweight framework leveraging Zig's features for efficient, type-safe programming.


title: Moonwalk--
link: https://github.com/vaishnavipawar-29/Moonwalk--
pubDate: 2026-01-03 20:06:20
author: vaishnavipawar-29
keyword: POC
language: C++
description:
🚀 Enhance call stack security with Moonwalk--, a PoC that combines Stack Moonwalking and memory self-encryption to protect shellcode from inspection.


title: CVE-2026-44578
link: https://github.com/dinosn/CVE-2026-44578
pubDate: 2026-05-16 18:15:20
author: dinosn
keyword: CVE-2026
language: Python
description:
CVE-2026-44578: Next.js WebSocket Upgrade SSRF — pre-auth credential theft via localhost:80. Lab + exploit + audit.


title: pueblo-food-map
link: https://github.com/kr8vka0z/pueblo-food-map
pubDate: 2026-05-13 02:33:31
author: kr8vka0z
keyword: POC
language: TypeScript
description:
Pueblo Food Access Map — POC for Pueblo Food Project. Mobile-first web map of food resources (gardens, pantries, grocery) with walking + bus directions via Pueblo Transit GTFS.


title: safeline
link: https://github.com/api-evangelist/safeline
pubDate: 2026-03-27 18:08:58
author: api-evangelist
keyword: RCE
description:
SafeLine is an open-source self-hosted Web Application Firewall (WAF) and reverse proxy developed by Chaitin Technology that protects web applications and APIs from attacks including SQL injection, XSS, code injection, OS command injection, SSRF, path traversal, and RCE.


title: Steel-Mountain-TryHackMe-Walkthrough-Windows-Privilege-Escalation-HFS-RCE
pubDate: 2026-05-17 07:24:04
author: abanop22333
keyword: RCE
link:
https://github.com/abanop22333/Steel-Mountain-TryHackMe-Walkthrough-Windows-Privilege-Escalation-HFS-RCE

description:
A complete walkthrough covering enumeration, initial access via CVE-2014–6287, privilege escalation through service misconfiguration, and full manual exploitation without Metasploit.


title: on-premise-gitlab-deployment
link: https://github.com/csning1998/on-premise-gitlab-deployment
pubDate: 2025-07-22 02:43:30
author: csning1998
keyword: POC
language: HCL
description:
[PoC] IaC Automated deployment of HA GitLab on on-premise KVM/QEMU environment. Provisions HA Kubeadm / MicroK8s cluster, HA Patroni (Postgres), Redis Sentinel, MinIO, and HA HashiCorp Vault with PKI (Sidecar) and AppRole using Packer, Terraform, and Ansible.


title: PlausiDen-Forge
link: https://github.com/thepictishbeast/PlausiDen-Forge
pubDate: 2026-05-04 14:37:46
author: thepictishbeast
keyword: POC
language: Rust
description:
Unified frontend builder — Loom design tokens + CMS content + Crawler audits + strict-mode build pipeline. SkillShots used as the PoC surface.


title: bugbounty-codex-skill-poc
link: https://github.com/JAE0Y2N/bugbounty-codex-skill-poc
pubDate: 2026-05-17 11:44:04
author: JAE0Y2N
keyword: RCE
language: Python
description:
Private PoC for Bugcrowd OpenAI submission — Codex Desktop skill-installer RCE chain. Benign marker payload only.


title: palo-alto-cve-2026-0265-checker
link: https://github.com/tstephens1080/palo-alto-cve-2026-0265-checker
pubDate: 2026-05-17 09:31:24
author: tstephens1080
keyword: CVE-2026
language: Python
description:
Python script to sweep a fleet of Palo Alto firewalls and Panoramas via SSH, check PAN-OS version against CVE-2026-0265 (Authentication Bypass via Cloud Authentication Service), detect whether CAS is actually configured, and report exploitability in a color-coded summary table.


title: ai-playground
link: https://github.com/diegopacheco/ai-playground
pubDate: 2024-03-10 13:08:24
author: diegopacheco
keyword: POC
language: Jupyter Notebook
description:
AI POCS: ML, NLP, LLM, Vision, Classification, clustering, GenAI, Transformers, PyTorch, Keras, All things AI POCS.


title: agent-pocket-daemon
link: https://github.com/928PJY/agent-pocket-daemon
pubDate: 2026-04-28 21:45:56
author: 928PJY
keyword: POC
language: TypeScript
description:
Remote-control your local AI coding agent from your phone — auto-discovery, permission approvals, end-to-end encrypted relay. Claude Code + iOS today; more agents and platforms coming


title: tapeplayer
link: https://github.com/uiscsi/tapeplayer
pubDate: 2024-02-17 05:14:56
author: uiscsi
keyword: POC
language: Go
description:
Play FLACs straight from tape drive. Make an audio tape deck out of a tape drive. As crazy as it sounds. PoC app for uiscsi.


title: certin-report-maker
link: https://github.com/AnshumanAtrey/certin-report-maker
pubDate: 2026-05-17 14:55:00
author: AnshumanAtrey
keyword: POC
language: Python
description:
Generate CERT-In Annexure-A VAPT reports from PoC screenshots. A Claude Code plugin for firms taking the OLPST empanelment exam.


title: RPC-YOLO
link: https://github.com/pioneer118/RPC-YOLO
pubDate: 2026-05-17 14:04:37
author: pioneer118
keyword: 反序列化
description:
本项目设计了一套基于 C++ 分布式 RPC 框架的 YOLO 目标检测系统，支持多客户端上传检测图片，服务端完成实时目标检测并返回检测结果。项目以 Muduo 网络库的 Reactor 模型为基础搭建高并发 RPC 通信框架，通过自定义消息协议解...


title: home-assistant-pocketsmith
link: https://github.com/cloudbr34k84/home-assistant-pocketsmith
pubDate: 2024-07-04 09:19:45
author: cloudbr34k84
keyword: POC
language: Python
description:
The PocketSmith integration allows you to display account balances from PocketSmith in Home Assistant.


title: Layoutr
link: https://github.com/RishabPatidar89714/Layoutr
pubDate: 2026-05-17 16:16:02
author: RishabPatidar89714
keyword: POC
language: JavaScript
description:
This repository contains a Proof of Concept (POC) for an intelligent, chat-based layout generation and manipulation agent. The system allows users to interact with a complex design JSON using natural language instructions (e.g., "Convert this design to 9:16", "Move the headline to the top", "Make t...


title: parbaked
link: https://github.com/saml7n/parbaked
pubDate: 2026-05-16 23:29:06
author: saml7n
keyword: POC
language: Python
description:
A par-baked starter for FastAPI PoC apps: signup-with-admin-approval auth, rate limiting, and (soon) deploy scaffolding for fly.io


title: pocket-reader
link: https://github.com/Amrit7679/pocket-reader
pubDate: 2025-03-18 01:58:59
author: Amrit7679
keyword: POC
language: JavaScript
description:
🎧 Read web content aloud with this Chrome extension using Pocket TTS for fast, local audio playback and multiple voice options.


title: vcp-payout-dispute-poc
link: https://github.com/yerouser/vcp-payout-dispute-poc
pubDate: 2024-01-23 14:21:54
author: yerouser
keyword: POC
description:
🔍 Strengthen payout dispute resolution with tamper-evident audit trails using VCP v1.1's Three-Layer Architecture for trustworthy trading records.


title: rust-spectre
link: https://github.com/Badomel/rust-spectre
pubDate: 2024-09-25 09:07:16
author: Badomel
keyword: POC
language: Makefile
description:
👻 Demonstrate browser-based execution with Rust-generated WebAssembly for high-performance, client-side capabilities in post-exploitation scenarios.


title: top-solana-token-creator-tools
link: https://github.com/MauriGonzalez22/top-solana-token-creator-tools
pubDate: 2023-02-23 07:54:52
author: MauriGonzalez22
keyword: POC
description:
🚀 Explore top no-code tools for creating Solana tokens, helping you easily launch and manage your digital assets with confidence.


title: agent-university-electron
link: https://github.com/dennisonbertram/agent-university-electron
pubDate: 2026-05-17 11:41:12
author: dennisonbertram
keyword: POC
language: TypeScript
description:
Agent University degree: Electron with deep macOS system integration. Progressive POCs (hello -> secure IPC -> storage -> macOS deep-integration -> packaging -> menu-bar capstone).


title: Boot2root
link: https://github.com/jesuismarie/Boot2root
pubDate: 2025-06-25 22:52:09
author: jesuismarie
keyword: webshell
language: C
description:
This project is a CTF-style vulnerable virtual machine designed for hands-on penetration testing and cybersecurity training. Root the box by exploiting misconfigurations, weak credentials, and privilege escalation paths. Ideal for practicing ethical hacking skills in a controlled lab environment.


title: cve-2026-34473-unauthenticated-dos-zte-routers
link: https://github.com/minanagehsalalma/cve-2026-34473-unauthenticated-dos-zte-routers
pubDate: 2026-05-16 22:57:50
author: minanagehsalalma
keyword: CVE-2026
language: HTML
description:
Technical breakdown of CVE-2026-34473, an unauthenticated denial of service affecting 17+ ZTE router models.


title: CVE-2026-31431-Metasploit-exploit
link: https://github.com/adityasingh108/CVE-2026-31431-Metasploit-exploit
pubDate: 2026-05-17 00:02:14
author: adityasingh108
keyword: CVE-2026
language: Ruby
description:
Automated Metasploit post-exploitation module for CVE-2026-31431 ("Copy Fail"). Weaponizes a deterministic logic flaw in the Linux kernel AF_ALG subsystem to achieve local privilege escalation (LPE) to root by safely corrupting a setuid binary directly in the shared Page Cache (RAM) without modifyi...


title: CVE-2026-46333
link: https://github.com/studiogangster/CVE-2026-46333
pubDate: 2026-05-17 18:33:43
author: studiogangster
keyword: CVE-2026
language: Go
description:
Research on `pidfd_getfd(2)`-based file descriptor leakage from privileged SUID processes. Demonstrates race-condition FD capture against OpenSSH `ssh-keysign` and exposure of sensitive root-owned file handles.


title: CVE-2026-31024
link: https://github.com/ErikDervishi03/CVE-2026-31024
pubDate: 2026-01-15 23:17:00
author: ErikDervishi03
keyword: CVE-2026
description:
Proof of Concept (PoC) for a stack-based buffer overflow in Steghide 0.5.1. Demonstrates how long file paths trigger a crash (DoS) and leak sensitive data (passwords) via system core dumps.


title: Advanced-Chinese-chat-bot
link: https://github.com/qilimary/Advanced-Chinese-chat-bot
pubDate: 2024-08-08 15:43:50
author: qilimary
keyword: 未授权
language: Python
description:
自己手搓代码实现的聊天机器人，不使用第三方库。现已支持角色扮演 ，成语接龙， 计算，聊天， 记忆功能， 推理机制，学习机制等。闭源项目。请注意，本源码的版权归我所有，仅限于当前项目的开发使用，未经授权不得...


title: cybergym-agentx-v2
link: https://github.com/tenalirama2005/cybergym-agentx-v2
pubDate: 2026-05-11 00:49:19
author: tenalirama2005
keyword: POC
language: Rust
description:
CyberGym purple agent v2 — Rust/Axum A2A server with GPT-5.5 Azure iterative PoC generation. Full feedback loop: workspace unpacking, 5 test_vulnerable iterations, crash-confirmed artifact submission. Berkeley RDI AgentBeats Sprint 3.


