Control plane of ltslab: CVE tracking, impact reports and backport procedures for the Spring Boot 3.5.x LTS builds - ltslab/lts-tracker

node2shell-detector - local + network detections for Node2Shell (CVE-2026-111497) by IONSEC. Python CLI: runtime posture, Brotli decoder fingerprints, dependency exposure, log fingerprints, opt-in ...

CVE-2026-98260 (exec: posix CPU timer UAF) - one-command temporary root for OnePlus 16 (PYB110) from uid 2000 shell, with KernelSU/FinaSU handover - AzirX1337/CVE-2026-98260-OnePlus16-PYB110-Jailbreak

PHP2Shell — Unauthenticated RCE chain exploiting CVE-2026-109618 (OOM memory corruption) + CVE-2026-109619 (stale global state) in PHP. - Nostraxiten/PHP2shell

This is a custom template for nuclei. Contribute to lowk3v/nuclei-templates development by creating an account on GitHub.

CVE-2026-75650 (StyleSmuggler): unauthenticated RCE via template injection in Magento Open Source / Adobe Commerce 2.4.4–2.4.9 — b63 showcase, lab-verified with patched-build negative test - basesi...

🖥️ Windows 环境管家：用户/系统环境变量真实读写；PATH 条目级编辑 + 失效目录检测 + 并发外部修改三方合并保护；Node.js / Temurin JDK / Go / Python / Rust 等运行时检测、托管安装与版本切换（官方归档 + SHA-256/签名校验，绝不伪装检测结果）。每次修改前自动备份，写入后读回验证并广播系统变更；默认非提权运行、逐操作 UAC。T...

vulnerability scanner python based. Contribute to DEEPIKAA-1709/vulnerability-scanner development by creating an account on GitHub.

A CVE/vulnerability scanner I built for my cybersecurity internship at Syntecxhub that grabs service banners and checks them against the real NVD API, producing a severity-sorted report. - KiNgSlaY...

A full-stack network and web vulnerability scanner built with React and Flask for educational security testing - 310625149054-dotcom/vulnsight-vulnerability-scanner

Free, source-included white-box web exploitation labs for OSWE-style prep. Read the code, find the chain, write the exploit — every lab ends in RCE. - cyb3radull4m/cyb3radull4m-labs

一个不会过期的设置页：规则、组件注册表、接口文档、Wiki 各读一份仓库源文件；附开发/线上模式与上线前漏洞扫描门禁。零依赖、只读、不联网。作者 chaierss · chaierss.fun - Chaierss/keel

Cybersecurity project demonstrating secure web development, user authentication, password hashing, SQL Injection (SQLi), Stored XSS, and vulnerability mitigation through vulnerable and secure imple...

Run detection rules (YARA, Suricata, Sigma, ...) on sample sets in a sandbox: detections, misses, false positives - rulezet/rulezet-tester

Independent source-level analysis and detection tooling for the PHP session.upload_progress pre-RINIT use-after-free (CVE-2026-109618 / CVE-2026-109619, CVSS 9.2, fixed 2026-10-21). Includes a heap...

CVE-2026-109618: Unauthenticated RCE via PHP session upload progress OOM heap corruption (Apache mod_php) - Abdullah-Mehtab/php2shell-lab

本目录是 HackTools 0.5.0 的简体中文汉化版本，功能与原版完全一致，仅界面文字改为中文。【汉化范围】 - 侧边栏全部工具名称、页面标题、按钮、输入框占位符、提示消息。 - 数据编码 / 哈希 / 文件传输 / 文件混淆 / Linux 命令 / PowerShell 命令 / 反弹 Shell / MSF Venom / TTY / LFI / XSS / SQL 注入 /...

Windows 平台注入工具箱：DLL 注入、Shellcode 注入、APC / Hook / Reflective 等技术实现 - som1ng/Rondo

面向黑盒渗透测试的取证 Runtime。IO 输出统一编号（req / cb / exp）并落盘，账本结论强制绑定可解析引用。工具强制三态输出（有 / 没有 / 没测到）与非零退出码，避免采集失败被记为阴性。 - Alanener/Plumboo

Automated Web Vulnerability Scanner Using Pythonc security checks, such as verifying HTTPS usage, checking important HTTP security headers, and identifying potentially exposed information in public...