Reflected, DOM-based, filter bypass va boshqa Cross-Site Scripting (XSS) usullarida amaliy XSS laboratoriya yechimlari va ularning tahlili. - secrecyberuz-commits/xss-challenges

OWASP checklist mastery, auth flow attacks, CSRF/SSRF/Session Fixation/Hijacking, payment gateway pentesting, VulnHub VMs (Mr. Robot, Zero Bank, Jangow, N7), and PoC/VAPT-style reporting. - Nizuii/...

矛与盾 — AI 攻防演练场：攻方 AI agent 入侵 Docker 靶场，守方 AI agent 实时防御，人类在可视化控制台围观全过程 - AGIHunt/spear-and-shield

A curated, searchable index of 880 digital forensics and incident response tools, resources and references. - dfir-toolkit/dfir-toolkit.github.io

Intentionally vulnerable CTF lab simulating a full corporate breach — chain SQLi, IDOR, LFI, insecure JWT, and stored XSS through a PHP helpdesk into a weakly-hashed database, then privilege-escala...

Contribute to tiandeyiliushang-sudo/fastjson-1.2.24-TemplatesImpl development by creating an account on GitHub.

基于 Java Attach API（参考 Arthas 原理）的 fastjson safeMode 运行时检测工具。无需重启目标应用、无需修改目标代码，即可在线检测目标 JVM 中 fastjson 的 safeMode 配置状态、AutoType 行为及绕过风险。 - hl0rey/fastjson-safemode-detector

网络安全学习笔记 — CVE 漏洞研究与复现记录. Contribute to chengbochuan3/Security-Blog development by creating an account on GitHub.

Lightweight, dependency-free web vulnerability scanner for common misconfigurations and application flaws. - senseiink/bugseye

网络安全学习笔记 | DVWA漏洞复现 + 等保2.0 + 安全工具实操. Contribute to Sukimjin/Security-Learning-Notes development by creating an account on GitHub.

Contribute to dennywise/CyberPanel-Authenticated-RCE development by creating an account on GitHub.

An emergency security patch by UBITQUITY to mitigate the unauthenticated SQL injection zero-day vulnerability in GeoServer's jsonArrayContains function. This hotfix sanitizes input paramete...

Empirical Security builds data-driven models that predict which vulnerabilities will actually be exploited, so security teams can prioritize remediation by real-world risk instead of raw CVSS sever...

Bam parser com YARA Rules modificadas e melhoradas - arthurex1/Bam-Parser-Melhorado-WARP-SS

RAT tools use shellcodes for remote access and system control. Shellcode injection and execution techniques bypass defenses, while red team tools focus on compiling and handling payloads for post-e...

Stored XSS vulnerability in codingWithElias school-management-system-php - elshanmammadoov/CVE-PoC-School-Management-System-PHP-XSS

Shellcode development involves creating payloads for post-exploitation tasks like antivirus evasion and UAC bypass. Tools like shellcode loaders and injectors enable execution, while assembly and e...

Malware builders create hidden trojans with features like UAC bypass and defender bypass. Tools like crypters and FUD ensure antivirus evasion, while shellcode and memory exclusion enhance stealth....

GuardDoc: Lightweight, local CLI tool & background daemon for document malware triage, extension spoofing detection, and real-time download watching on macOS & Linux. - jfx21/guarddoc