Contribute to dennywise/CyberPanel-Authenticated-RCE development by creating an account on GitHub.

网络安全学习笔记 | DVWA漏洞复现 + 等保2.0 + 安全工具实操. Contribute to Sukimjin/Security-Learning-Notes development by creating an account on GitHub.

Lightweight, dependency-free web vulnerability scanner for common misconfigurations and application flaws. - senseiink/bugseye

网络安全学习笔记 — CVE 漏洞研究与复现记录. Contribute to chengbochuan3/Security-Blog development by creating an account on GitHub.

基于 Java Attach API（参考 Arthas 原理）的 fastjson safeMode 运行时检测工具。无需重启目标应用、无需修改目标代码，即可在线检测目标 JVM 中 fastjson 的 safeMode 配置状态、AutoType 行为及绕过风险。 - hl0rey/fastjson-safemode-detector

Contribute to tiandeyiliushang-sudo/fastjson-1.2.24-TemplatesImpl development by creating an account on GitHub.

Intentionally vulnerable CTF lab simulating a full corporate breach — chain SQLi, IDOR, LFI, insecure JWT, and stored XSS through a PHP helpdesk into a weakly-hashed database, then privilege-escala...

A curated, searchable index of 880 digital forensics and incident response tools, resources and references. - dfir-toolkit/dfir-toolkit.github.io

矛与盾 — AI 攻防演练场：攻方 AI agent 入侵 Docker 靶场，守方 AI agent 实时防御，人类在可视化控制台围观全过程 - AGIHunt/spear-and-shield

OWASP checklist mastery, auth flow attacks, CSRF/SSRF/Session Fixation/Hijacking, payment gateway pentesting, VulnHub VMs (Mr. Robot, Zero Bank, Jangow, N7), and PoC/VAPT-style reporting. - Nizuii/...

Reflected, DOM-based, filter bypass va boshqa Cross-Site Scripting (XSS) usullarida amaliy XSS laboratoriya yechimlari va ularning tahlili. - secrecyberuz-commits/xss-challenges

Xac dinh va kiem tra MIME type an toan cho PHP - chong path traversal, SVG XSS, upload gia mao - nguyenquocanhz/php-mime-type

CVE-2026-72550 — Friendica Unauthenticated Stacked-Query SQL Injection PoC (CVSS 9.8 Critical) - abdugafforov-bobur/CVE-2026-72550-poc

Safe, budget-aware Python web access with SSRF protection, safe redirects, domain policies, retries, and response limits. - mirza1272/safe-web-access

Cybersecurity virtual experience projects covering Log4j vulnerability response and ransomware recovery with Python. - alainmartar/aig-shields-up-cybersecurity

Contribute to saipranathi25/jira_confluence_poc development by creating an account on GitHub.

A hybrid web vulnerability scanner built with Python 3.12, combining SAST (AST analysis) and DAST (SQLi, XSS) with an asynchronous web crawler. - alekzandren/Automated_Vulnerability_Scanner

Contribute to YordanStankov/Secrets-Dependency-Vulnerability-Scanner development by creating an account on GitHub.

AI-powered real-time threat detection system that analyzes nginx access logs using ML ensemble models and security rules to detect SQLi, XSS, SSRF, path traversal, command injection, and other web ...