A hands-on security lab demonstrating secondary-context path traversal and DNS rebinding leading to SSRF - Mgsy/lab-threadhub

👻 Manipulate ntdll's LdrpVectorHandlerList to register vectored exception handlers directly, bypassing traditional methods for enhanced control. - Buvan7-glitch/GhostVEH

Termux-X 终端 - 移动端终极渗透测试平台使用知识库. Contribute to xheishou-com/Termux-X-wiki development by creating an account on GitHub.

This runZero fork of nuclei-templates includes small changes and metadata. Substantial changes from this repository are PRd back to the Project Discovery upstream. Issues and PRs are limited to ru...

detailed example for authorization and authentication in spring boot framework. Whiach clearly give difference between AuthenticatorProvidor, AuthenticatorManager and UserServiceDetails. ALso it h...

ScopeLine is a modular, identity-aware pentesting framework for web apps and APIs. It discovers HTTP services, tests JWT and cookie auth, detects SSRF/IDOR, maps attack paths, and generates structu...

🚀 Protect your online privacy with Zapret-BF, a simple tool to bypass restrictions and ensure secure internet access. - Nawras448/zapret-bf

Professional exploit for CVE-2024-28397: Js2Py Sandbox Escape leading to Remote Code Execution (RCE). Includes modular payload generation. - xeloxa/CVE-2024-28397-Js2Py-RCE-Exploit

该系统是一款基于SpringBoot框架的农产品溯源系统，用于实现农产品从种植、加工到销售的全过程追溯。系统功能模块包括：农产品信息管理、生产记录管理、销售记录管理、溯源查询、权限管理等。采用SpringBoot框架、MySQL数据库等技术，支持数据实时查询与统计分析，确保农产品质量安全。 - 5771323ykw/nhtHvAgQCX

CSRF. Contribute to jeetpal2007/CSRF development by creating an account on GitHub.

Contribute to antisocialdreams1/ssrf-test-express development by creating an account on GitHub.

A collection of advanced PHP and ASPX web shells designed to bypass security measures. - sagsooz/Webshell-bypass

Contribute to andesco/bypass-manifest-cloudflare development by creating an account on GitHub.

🛒 Build a modern e-commerce system with Go using a high-performance architecture and essential features for managing products, orders, and payments. - pappusen4833/go-mall

Contribute to 0xEmhddsi-Net/splunk-attack-detection-lab development by creating an account on GitHub.

Integrate Burp suite with your local LLM e.g. ollama. - BerserkiKun/suite-o-llama

Contribute to chris315-psyga/XSS-lap development by creating an account on GitHub.

DVWA (Damn Vulnerable Web Application) is an intentionally insecure PHP/MySQL web application used to learn and practice web security vulnerabilities like SQL Injection, XSS, and CSRF in a safe env...

A safety-first Laravel crawler with explicit task lifecycle, SSRF protection, and idempotent, retry-safe jobs. - changhorizon/content-collector

Contribute to suicide-100q5a/MoltbookOpenClaw-bypass-v1.3.7 development by creating an account on GitHub.