渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms
Top disclosed reports from HackerOne
A web app for ranking computer science departments according to their research output in selective venues, and for finding active faculty across a wide range of areas.
中台Admin 基于 .NET10 、Vue3、uniapp、element-plus开发的前后端分离的权限管理系统。通过项目模板快速搭建项目框架、网关、接口、im即时通讯服务端等项目。支持代码生成器、多租户、数据权限、动态Api、任务调度、打印设计、OSS文件上传、滑块拼图验证、动态高级查询。集成认证授权、事件总线、国际化、数据验证、分布式Id、分布式缓存、分布式事务、全Api鉴权、接口文档等。
Simple integration of Flask and WTForms, including CSRF, file upload and Recaptcha integration.
Wappy: the open-source AI agent SDK for WhatsApp. Bring your own model, your own number, your own data. Local-first, no forced cloud, no vendor lock-in.
The full-stack Vue framework.
Unity C# reference source code.
A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps
Tools to bootstrap CAs, certificate requests, and signed certificates.
.NET Core or .NET Framework 4.0+ client for Redis and Redis Sentinel (2.8) and Cluster. Includes both synchronous and asynchronous clients.
A clean, self-hosted web UI for managing your Traefik reverse proxy.
Claude Skills for Governance, Risk, & Compliance (GRC): Expert-level compliance guidance for ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF, PCI DSS, EU AI Act, ISO 42001, ISO 27701, DORA, CSRD, India's DPDPA, CMMC 2.0, NIST AI Risk, SWIFT, CCPA/CPRA, and others. Benchmark 89% (with skills) vs 55% (without skills). Updated Monthly.
OAuth2 / OIDC for Spring backends of SPAs and mobile apps: the Spring Security beans the official starters leave to you (authorities, CORS, 2xx/401 for fetch, CSRF cookie, validated redirects, logout, one refresh flow at a time), as properties.
An online Minecraft source code viewer
Unique and efficient front-end framework for PHP
XSS/CSRF safe JWT auth designed for SPA
Create private keys and certificates with node.js
Generate X.509 certificates, CSRs
Matter-backed transactional, composable and traceable state evolution framework for Roblox
SAAS v0.6.1 — Student Absence & Academic Accommodation System: Flask+SQLite prototype (two-level approval, CSRF, attachment access control, timetable-based affected-course preview, 73-check CI), enterprise design package for HKUST(GZ), and Individual Ideation assignment
Self-hosted professor outreach tracker for prospective CS grad students: CSRankings import, AI-assisted scoring, Gmail reply scanning, local-first dashboard.
A lab-driven course on breaking web applications and explaining how to fix them — 491 notes, 36 reproducible labs, mapped to OWASP WSTG and the PortSwigger Top 10 Web Hacking Techniques.
Glyph: optical chemical structure recognition (OCSRGlyph) and Markush structure recognition (MarkushGlyph)
An explainable and reproducible post-training system for tool-using customer service agents with SFT, GRPO, verl and vLLM.