DeepSeekSU 是一个基于 KernelSU 定制的 Root 管理器。它**自带完整的提权链和内核模块**，不依赖官方 KernelSU App 也能独立工作——读授权名单、管理模块、执行 root 命令、开关内核特性，全都能自己做。 - mycolor401/deepseeksu

Hands-on web security lab exploring SQL injection, stored XSS, and OS command injection using DVWA in a local Ubuntu environment. - nimadab23-prog/dvwa-security-lab

Defensive detection & hardening artifacts for public x402 payment proxies: SSRF egress checks (xUnit harness), Suricata ruleset, operator hardening guide. No attack code. - kosoyyagent/x402...

Zero-trust URL validator and private/loopback/cloud-metadata IP range (RFC1918, 169.254.169.254, IPv6 link-local) SSRF guard for cloud media fetchers. - uptexx/ssrf-safe-url-guard

Audit installed Steam Workshop content and flag risky changes between updates. An early-warning tool, not antivirus. - Corencas/workshop-watch

Writeup y PoC educativo de CVE-2024-10441 (RCE pre-auth como root en Synology DSM via synoplugind). CVE ya parcheado; uso autorizado/defensivo. - Ntn10/cve-2024-10441-synology-rce

PoC for CVE-2026-72708 (blind SQLi) and CVE-2026-109378 (SSRF) in SPIP, both fixed in 4.4.18 - ka3n1x/spip-cve-2026

Contribute to loeken/docker-jellyfin development by creating an account on GitHub.

AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration. - hevnsnt/CVEngine

Another CLI web-application security scanner with nuclei - TyrusRC/vigil

Hands-on web security lab: each vulnerability shown as an exploitable /vuln route and a fixed /secure route, with tests proving both. Covers SQLi, XSS, IDOR. - koushikchowdary6/flask-appsec-lab

Advanced XSS detection tool. Contribute to affolter-engineering/xssearch development by creating an account on GitHub.

深度学习基于YOLO V8河道违规钓鱼检测识别系统 Pyqt5界面 违规钓鱼检测数据集的训练及应用. Contribute to 767172261/Deep-Learning-based-on-YOLO-V8-Riverway-Violation-Phishing-Detection-Identification-System-Pyqt5-Int development by creati...

深度学习基于YOLO V8河道违规钓鱼检测识别系统 Pyqt5界面 违规钓鱼检测数据集的训练及应用 (1) - 767172261/Deep-Learning-Training-and-Application-of-YOLO-V8-Riverway-Violation-Phishing-Detection-and-Identifi

PoC for CVE-2026-111497 (HTTP2Shell). Contribute to GlobularOne/HTTP2Shell-PoC development by creating an account on GitHub.

Go HTTP clients with TLS/mTLS, replay-aware retries, optional OpenTelemetry propagation, and an outbound URL policy client. - soulteary/http-kit

Wazuh SOC lab integrating YARA for malware-pattern detection and security alerting. - Funsho07/Wazuh-YARA-Malware-Detection

Developed Sentinel, a Python-based vulnerability scanner using Nmap for port scanning, service enumeration, and OS detection. Integrated Metasploit module mapping, SearchSploit, risk scoring, and a...

CVE-2026-115560: PHP session upload-progress serialize_handler mismatch → pre-auth object injection → RCE. Check/exploit/verify scripts + Docker lab + Suricata/Sigma detection rules. - al4n4n/CVE-2...

Exploit & analysis for PHP2Shell (CVE-2026-109618 / CVE-2026-109619). Demonstrating memory disclosure, ASLR bypass, and RCE via session.upload_progress memory bailout dangling pointers. - g...

🛡️ Hands-on defensive Docker lab for the October 2026 RCE week — PHP2Shell (CVE-2026-109618/619), Node.js Brotli & Next.js sharp. See the attack surface and blast radius, and learn to shut ...