Recursive file triage tool that inspects content and structure (PDF, Office, PE/ELF, archives, email) for suspicious contradictions - Paspke/FileTriage

My corner of the internet. HTB writeups, red team notes, and AV/EDR evasion research. - darkness215/RadiantSec

【Java计算机毕业设计分享】基于Shiro框架的渗透测试管理系统，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - owenbrave/KcIcjbJE

DevAI RCE PoC. Contribute to mindbleed/rce-poc development by creating an account on GitHub.

A practical SSRF security lab featuring real-world bypass techniques, cloud metadata simulation, DNS rebinding, and secure SSRF defenses. - usfa7med/ssrf-lab

A deliberately vulnerable Spring Boot application used to develop and validate the Capstone vulnerability scanner. It provides predictable browser and API findings for Dynamic Application Security ...

Non-destructive proof-of-concept and verification harness for **CVE-2026-60137**, a blind SQL injection in WordPress core (`WP_Query::author__not_in`), reachable via the REST API's `author_...

Simulated network vulnerability assessment with CVE detection, CVSS scoring, compliance checking, and remediation guidance - Freddricklogan/network-vulnerability-scanner

A production-grade, zero-trust security library for Node.js & TypeScript. Defends against OWASP Top 10, Prototype Pollution, XSS, SQLi, and Path Traversal with WebAuthn, AES-256-GCM, Adapti...

【Java计算机毕业设计分享】基于SSM的漏洞扫描器管理系统，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - q015r4obh2/FGRdlWYVDO

Defensive detection & mitigation tool for CVE-2026-31431 ("Copy Fail") — Linux kernel algif_aead LPE. No exploit code included. - joaocalciolari07/copyfail-guard

PoC + analysis for CVE-2026-54917 — SeaweedFS S3 gateway cross-bucket path traversal (CVSS 10.0, <4.30). Read/write any bucket via .. in the object key. - BiiTts/CVE-2026-54917-SeaweedFS-Cro...

Autonomous AI-driven penetration testing framework with real-time tool orchestration, operator-confirmed exploit execution, attack surface management, and automated report generation. - nickpupp0/E...

Educational CTF lab recreating the July 2026 autonomous AI agent intrusion at Hugging Face. Sandbox escape → SSRF → HDF5 file read → Jinja2 SSTI → Kubernetes lateral movement → supply chain pivot. ...

Contribute to Daddypool-44418/xss-learning-log development by creating an account on GitHub.

外贸网站安全扫描器 — 一行命令出报告，漏洞+评分+修复方案。专为中国中小外贸网站设计，零门槛零依赖。 - dongbofale/tradeguard

Building and testing custom YARA rules for malware detection at the network edge - cy-bkewusie3923-commits/edge-yara-detection

Dependency-free Python library and CLI for structured Turkish news extraction with JSON-LD/semantic HTML parsing and SSRF-aware fetching. - okturan/news-extractor

Production-inspired Kubernetes on bare-metal with GitLab CI, ArgoCD, ESO, Prometheus/Loki/Jaeger, CVE hardening cycle, and etcd restore drill — Astroshop OpenTelemetry reference workload. - mohiudd...

Seraphinite Accelerator <= 2.29.18 - Reflected Cross-Site Scripting PoC - kalhoralireza/CVE-2026-17532