Exploitation write-up for PortSwigger Path Traversal lab — Null Byte Bypass (%00). Demonstrates how appending %00 to a filename terminates OS-level string processing, bypassing server-side extensio...

This repo contains custom scripts. Contribute to sambiyal/Portswigger-Burp-Extension development by creating an account on GitHub.

用于自动化检测图片上传功能中的XSS漏洞。通过将上传的文件修改为SVG格式并插入XSS Payload来测试漏洞。 - xiaolu-cmd/SVG-XSS-Upload-Scaner

Crossplane configuration package: crossplane-kubernetes-provider. Kubernetes provider, ProviderConfig, and RBAC. - hops-ops/crossplane-kubernetes-provider

Linux kernel CVE exploit analysis report and relative debug environment. You don't need to compile Linux kernel and configure your environment anymore. - bsauce/kernel-exploit-factory

SSRF-safe URL validator that returns pinnable resolved IPs - jonathanong/ssrf-guard

Contribute to sec-dojo-com/cve-poc development by creating an account on GitHub.

Qualys' Burp Extension for WAS. Contribute to QIntegration/burp-extension-for-was development by creating an account on GitHub.

CSRF和SSRF漏洞演示环境，用于Web安全教学. Contribute to Guojin0826/csrf-ssrf-lab development by creating an account on GitHub.

A threat intelligence-based website that provides malware detection and analysis services, offering YARA rules for identified malware along with a reporting portal for malware researchers. - 0xZain...

基于 C++ 高性能 Web 框架 drogon 开发的云存储网盘系统，采用前后端分离架构。后端使用 drogon 构建 RESTful API 服务，MySQL 存储用户与文件元数据，Redis 缓存热点数据与用户会话，Nginx 实现反向代理与负载均衡；前端基于 Vue3 搭建交互界面。支持用户注册登录、文件上传/下载/分享、目录管理等核心功能，通过异步 I/O 与多线程模型保障高并发场...

Support-engineer diagnostic collector for FeatureForm-on-Kubernetes (and any K8s workload). One stdlib-only Python script, --mode auto/ff/k8s. Read-only RBAC, no Secrets API access, two-pass redact...

🤖 Control Kubernetes with ease using a secure Telegram bot that leverages RBAC permissions, ensuring safe cluster operations for your team. - cropy128900/kbot

Mitigate SSRF and DNS rebinding in reqwest by filtering DNS lookups, redirect targets, and URL literals through an IP / host ACL - walf443/reqwest-ssrf-guard

Security scanner for AI agent skills — 38 modules detecting credential theft, supply-chain attacks, prompt injection, and runtime abuse across any skill bundle. - JXXR1/skill-scanner

RootHawkX 是一个 Linux 本地安全测试终端工具,本项目基于RootHawk进行修改，集成了更多漏洞利用模块。 - DeEpinGh0st/RootHawkX

Contribute to LevaAverGit/mini-siem-detection-lab-v2 development by creating an account on GitHub.

CVE-2026-40564: SSRF via FlinkSessionJob jarURI in apache/flink-kubernetes-operator. Self-contained reproducer that runs on a local kind cluster with one make command. - oscerd/CVE-2026-40564

Container escape scenario modeler — enumerate container security posture and model realistic escape paths - Su1ph3r/Cepheus

to understand jenkins pipeline. Contribute to animeshsahoo5/nodeproject development by creating an account on GitHub.

Fiches XSS réfléchie, SSTI, SQLi, Command Injection — labs autorisés - Remy-Miquel/web-vulnerabilities-labs