A self-hosted vulnerable Next.js environment running on Docker for simulating CVE-2025-55182. Built for educational security research and CTF practice. - xxxTectationxxx/React2Shell-CVE-Lab

🛠 Exploit CVE-2025-8088 with this Python tool to generate malicious WinRAR archives that ensure payload persistence in Windows startup folders. - Markusino488/cve-2025-8088

Interactive RCE Pseudo-Shell Tool. Contribute to danielorlando97/iwshell development by creating an account on GitHub.

Contact Form Injection -> RCE -> Account Take Over - Abenezer-A/Project-11---Contact-Form-Injection

一个自托管的 XSS 协作平台，用于 Web 安全研究、教育演示以及授权的渗透测试。支持 XSS 回传数据收集、Payload 管理、Web 后台管理。 - shaoyu521/xss-platform

AI渗透测试平台-Web漏洞设计及安全演示系统. Contribute to Austain257/AI-Penetration-Testing-Platform development by creating an account on GitHub.

writeups for (CVE-2025-67586, CVE-2025-67985, CVE-2025-67986) - r0xtsec/CVE

CTF de Seguridad en Bases de Datos (URJC): retos SQL Injection, blind/time-based, RCE con INTO OUTFILE - juansrz/dbsec-P2-ctf

Secure-by-default demo lab showing how container hardening (distroless images, non-root, read-only filesystem, runtime-injected secrets) can neutralize a critical Next.js/React Server Actions RCE (...

Here is the CVE-2025-65817. Contribute to Istaarkk/CVE-2025-65817 development by creating an account on GitHub.

OpsGuard eliminates the "3 AM PagerDuty" nightmare, specifically protecting against threats like the recent CVE-2025-55184 (Next.js DoS) - shubham-01-star/OpsGuard-simulation

A Python-based security scanner for detecting and exploiting **React Server Components (RSC)** vulnerabilities in Next.js applications. This tool performs passive detection, active fingerprinting, ...

创新创业学分管理系统 java springboot ssm mysql (源代码+数据库+配套论文+ppt) 角色：管理员、用户 管理员：管理员进入主页面，主要功能包括对个人中心、学生管理、创新创业类别管理、创新创业成果管理、成果审核管理、学生学分管理、学分记录管理、公告信息管理、留言墙、系统管理等进行操作。 公告信息、创新创业资讯、留言墙、在线沟通、Python+Django+Vue...

CVE-2025-20393. Contribute to Ashwesker/Blackash-CVE-2025-20393 development by creating an account on GitHub.

这是一个基于python专为网络安全渗透测试设计的智能代理工具，可以帮助自动化执行常见的安全测试任务。 - kk12-30/PenTest

PaperCut NG/MG Authentication Bypass and Remote Code Execution (RCE) Exploit Tool. A standalone Bash implementation of the PaperCut exploit chain, featuring optional proxy support, automated sessio...

CVE-2025-14733. Contribute to Ashwesker/Blackash-CVE-2025-14733 development by creating an account on GitHub.

React2Shell vulnerability (CVE-2025-55182 / CVE-2025-66478) Full Script - chrahman/react2shell-CVE-2025-55182-full-rce-script