Rust 应急响应分析工具：Windows/Linux 日志、进程、离线 PCAP 与 AI 分析，支持 macOS arm64 CLI - MoShouSecurity/easy_analyzer

Vulhub spring/CVE-2016-4977: Spring Security OAuth2 Whitelabel SpEL RCE (CVE-2016-4977), run with Isoloom - CyberCTF/vulhub-spring-cve-2016-4977

Vulhub solr/CVE-2019-17558: Apache Solr Velocity Template RCE (CVE-2019-17558), run with Isoloom - CyberCTF/vulhub-solr-cve-2019-17558

Pedidos360 - Microservicios Spring Boot (productos, clientes, pedidos y BFF) con validacion JWT - Dylan6661/pedidos360-backend

headers, SSL, SQLi, XSS, CORS checks. Contribute to oluwaseyi-rgb/VulnWatch development by creating an account on GitHub.

OWASP SKF labs: DOM-Based Cross-Site Scripting lab, run with Isoloom - CyberCTF/skf-xss-dom

Node.js SEO and social metadata analyzer with safe URL fetching, API reports, previews, and automated tests. - alianjum0/ogpreview-node

Project 001: Network Enumeration & Exploitation. Contribute to cvonclark/Penetration-testing-lab-001 development by creating an account on GitHub.

Rust-based web app enumeration tool: subdomain mapping, Nuclei scanning, backup/config fuzzing, .git exposure detection - Fad-X/webmeasy

SVG Sanitizer, preventing XSS. Contribute to Borewit/svg-sanitizer development by creating an account on GitHub.

CVE-2026-21589 detector for Atlassian Data Center webresource traversal. Pre-auth webroot file read confirm for Jira, Confluence and Bitbucket. - ynsmroztas/AtlasSniper

Monitoring CI/CD pipeline performance and build metrics with Grafana, Prometheus, GitHub Actions and Jenkins - AmbujKRai/grafana-cicd-monitoring

Maintained OpenVPN community container with build-in exporter. Tested with vulnerability scanner and full e2e tests. - ThaseG/openvpn-container

Payment + Compliance (AML screening) saga PoC. A custom Java saga orchestrator coordinates two independently deployable Spring Boot microservices (payment-service, compliance-service) over plain RE...

Custom Shellcode Template in Rust. Contribute to LostAquilae/RustyShell development by creating an account on GitHub.

Authorized hackathon honeypot: SSRF -> fake cloud metadata -> excessive-permissions chain on Akash - divyanaras/attack-sandbox

Black-box API performance profiler: Go benchmark engine with SSRF protection and a live Next.js report - saifGawdat/superiorAPI

Plug-and-play SSRF protection for TYPO3's HTTP client, with default private-network blocking and classic TER installation - by Netresearch - netresearch/typo3_http_guard

Self-hosted bug bounty workspace for reflected XSS: URL intake, automated rechecks, Playwright screenshot evidence, manual triage, statistics, and disclosure-ready exports. Local-first, PHP/Symfony...

Browser-based log analysis exercise: find the host beaconing to a C2 server. Synthetic data. - AshongLabs/beacon-hunt

Compiler construction and formal language processing. Projects include lexical and syntax analysis with Flex/Bison, abstract syntax tree generation, translation of a C-like language into x86-64 ass...