A CVE/vulnerability scanner I built for my cybersecurity internship at Syntecxhub that grabs service banners and checks them against the real NVD API, producing a severity-sorted report. - KiNgSlaY...

A full-stack network and web vulnerability scanner built with React and Flask for educational security testing - 310625149054-dotcom/vulnsight-vulnerability-scanner

Free, source-included white-box web exploitation labs for OSWE-style prep. Read the code, find the chain, write the exploit — every lab ends in RCE. - cyb3radull4m/cyb3radull4m-labs

一个不会过期的设置页：规则、组件注册表、接口文档、Wiki 各读一份仓库源文件；附开发/线上模式与上线前漏洞扫描门禁。零依赖、只读、不联网。作者 chaierss · chaierss.fun - Chaierss/keel

Cybersecurity project demonstrating secure web development, user authentication, password hashing, SQL Injection (SQLi), Stored XSS, and vulnerability mitigation through vulnerable and secure imple...

Run detection rules (YARA, Suricata, Sigma, ...) on sample sets in a sandbox: detections, misses, false positives - rulezet/rulezet-tester

Independent source-level analysis and detection tooling for the PHP session.upload_progress pre-RINIT use-after-free (CVE-2026-109618 / CVE-2026-109619, CVSS 9.2, fixed 2026-10-21). Includes a heap...

CVE-2026-109618: Unauthenticated RCE via PHP session upload progress OOM heap corruption (Apache mod_php) - Abdullah-Mehtab/php2shell-lab

本目录是 HackTools 0.5.0 的简体中文汉化版本，功能与原版完全一致，仅界面文字改为中文。【汉化范围】 - 侧边栏全部工具名称、页面标题、按钮、输入框占位符、提示消息。 - 数据编码 / 哈希 / 文件传输 / 文件混淆 / Linux 命令 / PowerShell 命令 / 反弹 Shell / MSF Venom / TTY / LFI / XSS / SQL 注入 /...

Windows 平台注入工具箱：DLL 注入、Shellcode 注入、APC / Hook / Reflective 等技术实现 - som1ng/Rondo

面向黑盒渗透测试的取证 Runtime。IO 输出统一编号（req / cb / exp）并落盘，账本结论强制绑定可解析引用。工具强制三态输出（有 / 没有 / 没测到）与非零退出码，避免采集失败被记为阴性。 - Alanener/Plumboo

Automated Web Vulnerability Scanner Using Pythonc security checks, such as verifying HTTPS usage, checking important HTTP security headers, and identifying potentially exposed information in public...

Local reproduction lab for PHP2Shell (CVE-2026-109618 / CVE-2026-109619): PHP 8.5.11 source-built mod_php target, chunked OOM trigger harness, findings + mitigations. Loopback only. - Frankie7techy...

Скрипты автоматизации рутинных задач ИБ: анализ журналов, аудит настроек Windows, извлечение индикаторов компрометации - Ravikjan/security-scripts

리버싱·악성코드 분석 write-up과 YARA 룰. Contribute to cmry9775/malware-analysis-notes development by creating an account on GitHub.

Contribute to su12s-ops/IoTGuard-Public development by creating an account on GitHub.

Multi-region HTTP CONNECT proxy in Go on AWS (Terraform), hardened as an egress gateway: SSRF and metadata blocking, DNS rebinding guard. - AguenonN/levpn

Analysis and negative control for CVE-2026-109618/109619: which PHP builds still arm, why 8.4.27 does not, and why the chain does not transfer to PHP-FPM. Exploit withheld until 2026-11-25. - ggsec...

Unauthenticated RCE in PHP via session.upload_progress use-after-free (CVE-2026-109618 / CVE-2026-109619) - gorgeoushos/CVE-2026-109618-research

Burp Suite extension in Java 17 using Montoya API - Auto-detects JWTs and tests 3 attacks (alg:none, weak secret brute-force, expiry) in one click with Repeater integration. - yusufdhansay/JWTBreaker

The project covers black-box testing of a single web target that the user is allowed to test. The scanner crawls links and forms on the same host and tests each parameter for error-based SQL inject...