Hands-on web security lab: each vulnerability shown as an exploitable /vuln route and a fixed /secure route, with tests proving both. Covers SQLi, XSS, IDOR. - koushikchowdary6/flask-appsec-lab

Advanced XSS detection tool. Contribute to affolter-engineering/xssearch development by creating an account on GitHub.

深度学习基于YOLO V8河道违规钓鱼检测识别系统 Pyqt5界面 违规钓鱼检测数据集的训练及应用. Contribute to 767172261/Deep-Learning-based-on-YOLO-V8-Riverway-Violation-Phishing-Detection-Identification-System-Pyqt5-Int development by creati...

深度学习基于YOLO V8河道违规钓鱼检测识别系统 Pyqt5界面 违规钓鱼检测数据集的训练及应用 (1) - 767172261/Deep-Learning-Training-and-Application-of-YOLO-V8-Riverway-Violation-Phishing-Detection-and-Identifi

PoC for CVE-2026-111497 (HTTP2Shell). Contribute to GlobularOne/HTTP2Shell-PoC development by creating an account on GitHub.

Go HTTP clients with TLS/mTLS, replay-aware retries, optional OpenTelemetry propagation, and an outbound URL policy client. - soulteary/http-kit

Wazuh SOC lab integrating YARA for malware-pattern detection and security alerting. - Funsho07/Wazuh-YARA-Malware-Detection

Developed Sentinel, a Python-based vulnerability scanner using Nmap for port scanning, service enumeration, and OS detection. Integrated Metasploit module mapping, SearchSploit, risk scoring, and a...

CVE-2026-115560: PHP session upload-progress serialize_handler mismatch → pre-auth object injection → RCE. Check/exploit/verify scripts + Docker lab + Suricata/Sigma detection rules. - al4n4n/CVE-2...

Exploit & analysis for PHP2Shell (CVE-2026-109618 / CVE-2026-109619). Demonstrating memory disclosure, ASLR bypass, and RCE via session.upload_progress memory bailout dangling pointers. - g...

🛡️ Hands-on defensive Docker lab for the October 2026 RCE week — PHP2Shell (CVE-2026-109618/619), Node.js Brotli & Next.js sharp. See the attack surface and blast radius, and learn to shut ...

4-Tier (L1-L4) Static PE32+ x86_64 Reverse Engineering, Section Shannon Entropy, IAT Capability Triage & YARA Rule Studio - orakulzero/pe-reversing-lab

URL 急诊室 — an SSRF-hardened URL diagnostics tool that tells you what is broken and how to fix it. TypeScript + React + Cloudflare Workers. - iiiiiiiiiiiiiKK/linkmedic

宝塔面板 Linux 服务器安全自查插件：木马查杀（快速/深度，PHP WebShell 与挂马为强项，JS 为独立检测）、报告与处置、系统体检、日志审计、文件溯源、深度排查、文件完整性巡检。只读检测，不自动结束进程/删除文件，处置需人工核实。非通用多语言杀毒引擎或动态沙箱。 - ymwl/bt-fhx-safe

This is a poc for PHP issue that was announced on 20 oct - struttonpigeon/phppoc

CVE-2026-21627 proof of concept and exploit script - SAIM28826/CVE-2026-21627

A curated index of hands-on CTF labs covering Local File Inclusion (LFI to RCE), Remote File Inclusion (RFI), PHP wrapper abuse, log poisoning, PHAR deserialization, and Blind SSRF from Learn SecBy...

A curated index of hands-on CTF labs covering XML External Entity (XXE), Server-Side Request Forgery (SSRF), DNS rebinding, protocol smuggling, and cloud metadata pivoting from Learn SecByte. - sif...

Contribute to aminulislamfahim/gitlab-cve-advisories development by creating an account on GitHub.

A curated index of hands-on CTF labs covering path traversal filter bypasses (double encoding, Unicode, null byte), Zip Slip, web shell uploads, SVG Stored XSS, and malicious PDF defense from Learn...

Compiled version of Wh04m1001's exploit for iwr/wget delivery to VM. - SamDHarrison/Compiled-CVE-2023-21752