Magento 2 / Adobe Commerce security patch for the StyleSmuggler GraphQL template-injection RCE zero-day (sansec.io/research/stylesmuggler) - Ceymox/StyleSmugglerShield

VulnRecon is an automated web vulnerability scanner for detecting OWASP Top 10 security flaws and performing website reconnaissance. - Amans66/VulnRecon

Ethical web application security testing project demonstrating SQL injection and reflected XSS vulnerabilities in an isolated lab environment. - oarabengkhunou-source/Penetration-Testing-Project

Black-box penetration test of a PHP internal management system. Identified 5 vulnerabilities: Critical SQL injection with query disclosure, stored XSS with session cookie theft, IDOR across client ...

Afrog Distributed Master. Contribute to wffwf/DistributedAfrog development by creating an account on GitHub.

Web vulnerability scanner. Contribute to Xuxu1020/bobscan development by creating an account on GitHub.

Contribute to 0x00phantom-hat/CVE-2026-11991-Exploit development by creating an account on GitHub.

漏洞扫描智能体. Contribute to bear561/vuln-scan-agent development by creating an account on GitHub.

End-to-end malware analysis reports, extracted IOCs, and custom YARA detection rules developed in an isolated lab (FLARE-VM / REMnux). Includes WannaCry, trojans, and malscripts. - R3DN1GHT2005/Mal...

This repository contains my detection rules for all kinds of malware and suspicious software. - ilyas7/yara-rules

Professional-grade modular Android 12+ penetration testing framework — 10 modules: Recon, Payload, Installer, C2, PrivEsc, Persistence, Exfiltration, MITM, Automation, Reporting - UsamaMatrix/Andro...

Aurelius M5 demo — Maven project with a deliberately outdated log4j-core for the log4shell-bump patch runner to fix - aureliusgovenai/m5-log4shell-demo

Demo: leaf app depending on transdep-demo-service-lib (2 hops from a vulnerable log4j-core dep in transdep-demo-util-common). Test target for the transitive-dependency gap in vuln-remediation-agent...

Bifrost Finance — stored XSS via backend database leading to one-click wallet drain. Submitted via Immunefi. - ChristopherPatrickKuntz/bifrost-xss-disclosure

CRLF Email Header Injection in Plunk via raw MIME construction — CVSS 8.5 - romain-deperne/CVE-2026-34975

OS Command Injection in KubeAI via Model URL in Ollama startup probe — CVSS 8.7 - romain-deperne/CVE-2026-34940

Unauthenticated SSRF + Open Email Relay in Chamilo LMS via install.ajax.php — CVSS 7.5 - romain-deperne/CVE-2026-33715

PortSwigger Web Security Academy — Advanced Track. Hands-on exploitation of SSRF, Insecure Deserialization, and SSTI, with full PDF report and PoC screenshots. - itsmariamfatima/week-4-websec-w01-a...