Reproducible lab for three Drupal core advisories affecting 11.4.9 (fixed in 11.4.10): SA-CORE-2026-014 RCE in field_ui, SA-CORE-2026-015 stored XSS in link, SA-CORE-2026-016 stored XSS in navigati...

Maintained by the ANY.RUN team, this repository provides YARA rules to help detect and classify various malware families and other malicious artifacts. - anyrun/YARA

CVE-2026-99999 Educational Analysis — Linux kernel csum_start validation bug, Guest-to-Host memory leak (CVSS 9.3). Attack chain simulation, no real exploit. - 01luyicheng/CVE-2026-99999-analysis

Sentinel is a Python-based vulnerability scanner that detects open ports, identifies software versions, checks HTTP security headers, performs basic CVE lookups using the NVD, and generates TXT and...

Isolated Active Directory attack lab: a purpose-built Windows domain with deliberate misconfigurations, attacked end-to-end — recon, credential attacks, RBCD, ADCS/ESC1, Sliver C2, persistence, DCS...

CVE-2026-99999 Working PoC — real VM escape for Linux kernel csum_start bug (CVSS 9.3). Guest-to-Host heap leak. See also: CVE-2026-99999-analysis (Educational). - 01luyicheng/CVE-2026-99999-exploit

Analysis of a .NET malware loader tagged as Agent Tesla: hidden image payload, Defender-exclusion behavior, ATT&CK mapping, and draft YARA rules. - Cyber-Sam01/agent-tesla-loader-analysis

Writeups for Blue Team CTF challenges. Contribute to axbubnov/CTF-BlueTeam-Writeups development by creating an account on GitHub.

应急响应排查助手 —— 单文件/零依赖/离线可跑的 Windows·Linux 入侵排查、日志分析、WebShell 查杀工具 - czfSaber/er_check

Static Application Security Testing (SAST) & Live CVE Dependency Scanner (SQLi, RCE, LFI, XSS, Secrets) mapped to OWASP Top 10 & CWE - PrattayDev/vulnguard-sast

Hands-on web application security testing using Burp Suite, DVWA, and Dirsearch. Practiced HTTP request interception, SQL Injection, Reflected XSS, and Stored XSS in a safe lab environment. Explore...

**Python-Based Vulnerability Scanner | Python, Flask, Socket, SSL, Requests, Linux/Kali Linux** Developing a Python-based security assessment tool featuring TCP port scanning, IP resolution, SSL/T...

A Python-based Web Vulnerability Scanner that identifies common web security issues, including missing security headers, insecure configurations, and exposed resources. It generates scan results to...

本仓库记录VulMPFF发现的14个零日漏洞案例，介绍从模型筛查、人工分析到复现验证的具体过程。. Contribute to HMF2021/VulMPFF-ZeroDay-Cases development by creating an account on GitHub.

Malware Checker & Decryptor: static PE/ELF scanning, YARA rule matching, XOR/RC4 string decryptor, packed sample unpacker - ClipSanninExist/malware-checker-decryptor

Some Shiro exploits, for student use. Contribute to Mengde-ir7/ShiroKit development by creating an account on GitHub.

Practical laboratory works and security research on Web Application Security (HTTP, SOP/CORS, Input Validation, DOM/XSS, IDOR/BOLA, SQLi, and CSRF) on Ubuntu Server. - nematmaxmudov76-max/web-appli...

Security research and proof-of-concept scripts for three CVEs in Krayin CRM, fixed in 2.2.7 (IDOR, BOLA, SSRF via DNS rebinding). Reported responsibly. - 0xAdham1/krayin-crm-2.2.7-POC

A vulnerability management SaaS platform & reporting assistant for pentesters. It aggregates scan results (Nmap/Nuclei) from a local CLI, performs triage & CVSS calculation, and com...

Contribute to pro-rider/Web-Vulnerability-Scanner development by creating an account on GitHub.

Advanced software dependency vulnerability scanner and risk analyzer built with Python. - Alwin0606/DependencyGuard