Malware builders create hidden trojans with features like UAC bypass and defender bypass. Tools like crypters and FUD ensure antivirus evasion, while shellcode and memory exclusion enhance stealth....

Shellcode development involves creating payloads for post-exploitation tasks like antivirus evasion and UAC bypass. Tools like shellcode loaders and injectors enable execution, while assembly and e...

Stored XSS vulnerability in codingWithElias school-management-system-php - elshanmammadoov/CVE-PoC-School-Management-System-PHP-XSS

RAT tools use shellcodes for remote access and system control. Shellcode injection and execution techniques bypass defenses, while red team tools focus on compiling and handling payloads for post-e...

Bam parser com YARA Rules modificadas e melhoradas - arthurex1/Bam-Parser-Melhorado-WARP-SS

Empirical Security builds data-driven models that predict which vulnerabilities will actually be exploited, so security teams can prioritize remediation by real-world risk instead of raw CVSS sever...

An emergency security patch by UBITQUITY to mitigate the unauthenticated SQL injection zero-day vulnerability in GeoServer's jsonArrayContains function. This hotfix sanitizes input paramete...

Contribute to dennywise/CyberPanel-Authenticated-RCE development by creating an account on GitHub.

网络安全学习笔记 | DVWA漏洞复现 + 等保2.0 + 安全工具实操. Contribute to Sukimjin/Security-Learning-Notes development by creating an account on GitHub.

Lightweight, dependency-free web vulnerability scanner for common misconfigurations and application flaws. - senseiink/bugseye

网络安全学习笔记 — CVE 漏洞研究与复现记录. Contribute to chengbochuan3/Security-Blog development by creating an account on GitHub.

基于 Java Attach API（参考 Arthas 原理）的 fastjson safeMode 运行时检测工具。无需重启目标应用、无需修改目标代码，即可在线检测目标 JVM 中 fastjson 的 safeMode 配置状态、AutoType 行为及绕过风险。 - hl0rey/fastjson-safemode-detector

Contribute to tiandeyiliushang-sudo/fastjson-1.2.24-TemplatesImpl development by creating an account on GitHub.

Intentionally vulnerable CTF lab simulating a full corporate breach — chain SQLi, IDOR, LFI, insecure JWT, and stored XSS through a PHP helpdesk into a weakly-hashed database, then privilege-escala...

A curated, searchable index of 880 digital forensics and incident response tools, resources and references. - dfir-toolkit/dfir-toolkit.github.io

矛与盾 — AI 攻防演练场：攻方 AI agent 入侵 Docker 靶场，守方 AI agent 实时防御，人类在可视化控制台围观全过程 - AGIHunt/spear-and-shield

OWASP checklist mastery, auth flow attacks, CSRF/SSRF/Session Fixation/Hijacking, payment gateway pentesting, VulnHub VMs (Mr. Robot, Zero Bank, Jangow, N7), and PoC/VAPT-style reporting. - Nizuii/...

Reflected, DOM-based, filter bypass va boshqa Cross-Site Scripting (XSS) usullarida amaliy XSS laboratoriya yechimlari va ularning tahlili. - secrecyberuz-commits/xss-challenges

Xac dinh va kiem tra MIME type an toan cho PHP - chong path traversal, SVG XSS, upload gia mao - nguyenquocanhz/php-mime-type

WebLens (Automated Web Application Vulnerability Scanner and Security Rating Platform) doesn't just find vulnerabilities—it explains them, prioritizes them, rates your application's...

CVE-2026-72550 — Friendica Unauthenticated Stacked-Query SQL Injection PoC (CVSS 9.8 Critical) - abdugafforov-bobur/CVE-2026-72550-poc