Payment + Compliance (AML screening) saga PoC. A custom Java saga orchestrator coordinates two independently deployable Spring Boot microservices (payment-service, compliance-service) over plain RE...

Custom Shellcode Template in Rust. Contribute to LostAquilae/RustyShell development by creating an account on GitHub.

Authorized hackathon honeypot: SSRF -> fake cloud metadata -> excessive-permissions chain on Akash - divyanaras/attack-sandbox

Black-box API performance profiler: Go benchmark engine with SSRF protection and a live Next.js report - saifGawdat/superiorAPI

Plug-and-play SSRF protection for TYPO3's HTTP client, with default private-network blocking and classic TER installation - by Netresearch - netresearch/typo3_http_guard

Self-hosted bug bounty workspace for reflected XSS: URL intake, automated rechecks, Playwright screenshot evidence, manual triage, statistics, and disclosure-ready exports. Local-first, PHP/Symfony...

Browser-based log analysis exercise: find the host beaconing to a C2 server. Synthetic data. - AshongLabs/beacon-hunt

Compiler construction and formal language processing. Projects include lexical and syntax analysis with Flex/Bison, abstract syntax tree generation, translation of a C-like language into x86-64 ass...

AppleFDEKeyStore poc. Contribute to csrXamfi/CVE-2026-84520 development by creating an account on GitHub.

Log4j Exploit Detection Logic for Zeek. Contribute to corelight/cve-2021-44228 development by creating an account on GitHub.

Static unpacker, config extractor, YARA rules and IOCs for a Lumma Stealer chain delivered by a Go process-hollowing loader - ArtfulDodger10/lumma-go-analysis

WebCrack是一款web后台弱口令/万能密码批量检测工具，在工具中导入后台地址即可进行自动化检测。 - Curator-Kim/WebCrack-plus

A classis shellcode and simple loader written in pure C with using WinAPI and XOR-encryption. - Taepe13/first_shell_loader

pymap - sqlmap-style SQL injection discovery & exploitation toolkit (scanner + exploiter) - Edxx1/pymap

基于 LLMxCPG-D 的代码漏洞检测复现与离线部署：QwQ-32B 4-bit、公开 LoRA 适配器、FormAI 383 条评测与后续 CPG 流程复现。 - bpeng2550-dot/llmxcpg-reproduction

Portable GitOps POC kit for VMware vSphere Kubernetes Service (VKS): give a cluster name, ArgoCD brings up the cluster, add-ons and ingress. - edric45/vks-poc-kit

Proof-of-concept exploit for CVE-2026-1668. Contribute to tangrs/cve-2026-1668-poc development by creating an account on GitHub.

Anything about kernel security. CTF kernel pwn, kernel exploit, kernel fuzz and kernel defense paper, kernel debugging technique, kernel CVE debug. - bsauce/kernel-security-learning

Self-hosted DAST (dynamic application security testing) in one Docker image — OWASP ZAP, nuclei, katana, httpx and dalfox behind a Nuxt UI: authenticated SPA crawling, OpenAPI-driven active scans, ...

Advanced multi-threaded Clickjacking & security header vulnerability scanner with live PoC simulator. - AVII-VERSE/CJF