CRAReady SBOM test fixture — Java/Maven app with Log4Shell (CVE-2021-44228), Spring4Shell, Text4Shell, and other critical CVEs - neilc1964techned/craready-test-java-vulns

Docker-based CVE lab environments with PoC exploits. Log4Shell, Spring4Shell, Dirty Pipe, PwnKit, XZ backdoor and more. - Mkway/Critical-CVEs

A comprehensive Security Operations Centre (SOC) incident response simulation demonstrating threat detection, triage, analysis, and mitigation of the Spring4Shell vulnerability (CVE-2022-22965). - ...

Contribute to Bokbong909/patch-finder development by creating an account on GitHub.

AI Code Reviewer 是一个基于多Agent协作架构的代码审查与优化平台，通过四个专业Agent（CodeParser、SecurityAudit、PerformanceOptimizer、StyleChecker）按优先级顺序协同工作，结合长链推理能力对代码进行全方位分析——从AST结构解析、安全漏洞扫描（检测命令注入、SQL注入、硬编码凭证等10+种风险模式）、算法复杂度分析...

OWASP Security Training & Penetration Testing Lab - Ali-hey-0/owasp

I find vulnerabilities in web applications before attackers do. I test web apps, APIs, and mobile apps from an attacker's point of view. I look for flaws like IDOR, XSS, SSRF, CORS issues,...

🚀 A powerful, lightweight tool for detecting and analyzing DOM-based XSS vulnerabilities. - Mehran-Seifalinia/DOMinator

个人准备渗透测试和安全面试的经验之谈，和去部分厂商的面试题，干货真的满满~. Contribute to Leezj9671/Pentest_Interview development by creating an account on GitHub.

Simple shellcode staging loader in Csharp. Contribute to LeDucKhiem/Simple_Staging_Webserver development by creating an account on GitHub.

Contribute to kaleth4/NTLM-Relaying development by creating an account on GitHub.

Advanced AD Offensive Engine. Automates the path from stealthy recon to domain compromise. Features unauthenticated SMB Signing/NTLM Relay audits, ZeroLogon (CVE-2020-1472) hunting, and authenticat...

A structured DFIR playbook for analyzing memory dumps using Volatility 3. This repository provides a question-driven workflow for investigating volatile memory artifacts, suspicious processes, netw...

Contribute to p3ix/nuclei-templates development by creating an account on GitHub.

new nuclei template notifications. Contribute to h4sh5/nuclei-notifications development by creating an account on GitHub.

Contribute to asewmin/nuclei-project development by creating an account on GitHub.

Exploit for CVE-2026-31635 Local Privilege Escalation - Lutfifakee-Project/CVE-2026-31635

Python-based penetration testing framework developed for ethical hacking and network security labs, featuring reconnaissance, scanning, enumeration, vulnerability analysis, and exploitation modules...

Metasploit Exploit DB CVE Coverage. Contribute to znxp/exploit-db-formatted development by creating an account on GitHub.

HOVAX - 45 Modules Security Toolkit for Penetration Testing. Features: OSINT, Web Vuln Scanner (SQLi/XSS/LFI/RCE), WAF Bypass, JWT Cracker, GraphQL Exploit, Spring4Shell, HTTP Smuggling, Parameter ...

Contribute to OriginSecurityX/rill-flow-auth-bypass-aviator-rce development by creating an account on GitHub.