Project 001: Network Enumeration & Exploitation. Contribute to cvonclark/Penetration-testing-lab-001 development by creating an account on GitHub.

Rust-based web app enumeration tool: subdomain mapping, Nuclei scanning, backup/config fuzzing, .git exposure detection - Fad-X/webmeasy

SVG Sanitizer, preventing XSS. Contribute to Borewit/svg-sanitizer development by creating an account on GitHub.

CVE-2026-21589 detector for Atlassian Data Center webresource traversal. Pre-auth webroot file read confirm for Jira, Confluence and Bitbucket. - ynsmroztas/AtlasSniper

Monitoring CI/CD pipeline performance and build metrics with Grafana, Prometheus, GitHub Actions and Jenkins - AmbujKRai/grafana-cicd-monitoring

Maintained OpenVPN community container with build-in exporter. Tested with vulnerability scanner and full e2e tests. - ThaseG/openvpn-container

Payment + Compliance (AML screening) saga PoC. A custom Java saga orchestrator coordinates two independently deployable Spring Boot microservices (payment-service, compliance-service) over plain RE...

Custom Shellcode Template in Rust. Contribute to LostAquilae/RustyShell development by creating an account on GitHub.

Authorized hackathon honeypot: SSRF -> fake cloud metadata -> excessive-permissions chain on Akash - divyanaras/attack-sandbox

Black-box API performance profiler: Go benchmark engine with SSRF protection and a live Next.js report - saifGawdat/superiorAPI

Plug-and-play SSRF protection for TYPO3's HTTP client, with default private-network blocking and classic TER installation - by Netresearch - netresearch/typo3_http_guard

Self-hosted bug bounty workspace for reflected XSS: URL intake, automated rechecks, Playwright screenshot evidence, manual triage, statistics, and disclosure-ready exports. Local-first, PHP/Symfony...

Browser-based log analysis exercise: find the host beaconing to a C2 server. Synthetic data. - AshongLabs/beacon-hunt

Compiler construction and formal language processing. Projects include lexical and syntax analysis with Flex/Bison, abstract syntax tree generation, translation of a C-like language into x86-64 ass...

AppleFDEKeyStore poc. Contribute to csrXamfi/CVE-2026-84520 development by creating an account on GitHub.

Log4j Exploit Detection Logic for Zeek. Contribute to corelight/cve-2021-44228 development by creating an account on GitHub.

Static unpacker, config extractor, YARA rules and IOCs for a Lumma Stealer chain delivered by a Go process-hollowing loader - ArtfulDodger10/lumma-go-analysis

WebCrack是一款web后台弱口令/万能密码批量检测工具，在工具中导入后台地址即可进行自动化检测。 - Curator-Kim/WebCrack-plus

A classis shellcode and simple loader written in pure C with using WinAPI and XOR-encryption. - Taepe13/first_shell_loader

pymap - sqlmap-style SQL injection discovery & exploitation toolkit (scanner + exploiter) - Edxx1/pymap

基于 LLMxCPG-D 的代码漏洞检测复现与离线部署：QwQ-32B 4-bit、公开 LoRA 适配器、FormAI 383 条评测与后续 CPG 流程复现。 - bpeng2550-dot/llmxcpg-reproduction