Online banking app built twice — deliberately vulnerable vs hardened. NoSQL injection, RCE, stored XSS, with fixes and write-ups. - waqasakram2003-arch/banking-security-study

Parses the Amcache forensic artifact and verifies digital signatures and use YARA Rules - Obrdiff/AmcacheParser-

基于 Kali + Docker 的 Web 漏洞靶场，包含 SQL 注入、XSS、文件上传漏洞及修复对照 - wym4527-star/web-vuln-lab

CVE-2026-109618 / CVE-2026-109619 audit: the claimed PHP session.upload_progress UAF does not exist in released PHP. ASAN ablation, published-PoC test results, one-command lab. - xuehuolll/CVE-2026...

Contribute to BIBILZERODAY/CVE-2026-110372-MASS-EXPLOIT-WEBSHELL.STORE development by creating an account on GitHub.

Python-based Vulnerability Scanner mini project for Thiranex Internship Task 2. - Thrisha-Bangera/thiranex-vulnerability-scanner

Container escape 0-day research - kernel 6.8.0-90 Ubuntu 24.04 Docker seccomp bypass - zenbgs/kernel-escape-0day

Convert a shellcode binary file into an executable ps1 script - B1gCheater/shellcode2pwsh5

PHP estate triage for CVE-2026-109618 / CVE-2026-109619: inventory, Plesk audit, child-process detection. No exploit code. - yetDevs/php2shell-triage

z-song/laravel-admin v1.8.19 安全维护分支: HandleController 未授权RCE修复 + Pjax null保护 - song0223/laravel-admin

Linux vulnerability scanner: static Go binary, distro + OSV + NVD feeds, 63 host checks, no-install one-liner runner - ryan785/lync

Fast, lightweight, native Rust web security testing, DAST vulnerability scanner & HTTP/HTTPS/WebSocket interception proxy suite (~35 MB RAM, <0.2s startup) for macOS, Windows &am...

Browser-based YARA rule workbench — a miniature YARA engine in pure JavaScript. Write rules, test samples, see matches in a highlighted hex view. 100% client-side. - Llunatics/llogic-yara

A curated collection of hands-on cybersecurity CTF labs covering Log4Shell, Spring4Shell, ProxyLogon/ProxyShell, Microsoft SharePoint, Windows CLFS LPE, and Apache Framework CVEs from Learn SecByte...

CVE-2026-109618/109619 PHP session.upload_progress Exploit Research — POC & Analysis - ikow/php2shell-poc

PHP2Shell (CVE-2026-109618 / CVE-2026-109619) Docker lab and PoC. Use-After-Free in PHP's session.upload_progress. - 0x4148/CVE-2026-109618-php2shell-lab

PHP session.upload_progress RCE pair (CVSS v4.0 9.2 Critical x2) — full analysis, verified primitives, RCE chain, UAF weaponization harness, per-build symbol extraction - WoYinDao/CVE-2026-109618-C...

macOS Tauri GUI: Windows shellcode loader generator (private) - lzhcxy/MacLoader

A cybersecurity engineer watching over your Mac, that your AI agent can talk to. Local dashboard + MCP server over ClamAV, YARA-X (XProtect rules) and osquery. - 0xArx/warden

Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes ...

Dokploy <=0.29.12 compose branch stored command injection (CVSS 9.9 Critical) — clean-room exploit, swarm lab orchestration, reproduced live against v0.29.12 with host-takeover channel proof...