Xac dinh va kiem tra MIME type an toan cho PHP - chong path traversal, SVG XSS, upload gia mao - nguyenquocanhz/php-mime-type

Reflected, DOM-based, filter bypass va boshqa Cross-Site Scripting (XSS) usullarida amaliy XSS laboratoriya yechimlari va ularning tahlili. - secrecyberuz-commits/xss-challenges

OWASP checklist mastery, auth flow attacks, CSRF/SSRF/Session Fixation/Hijacking, payment gateway pentesting, VulnHub VMs (Mr. Robot, Zero Bank, Jangow, N7), and PoC/VAPT-style reporting. - Nizuii/...

矛与盾 — AI 攻防演练场：攻方 AI agent 入侵 Docker 靶场，守方 AI agent 实时防御，人类在可视化控制台围观全过程 - AGIHunt/spear-and-shield

A curated, searchable index of 880 digital forensics and incident response tools, resources and references. - dfir-toolkit/dfir-toolkit.github.io

Intentionally vulnerable CTF lab simulating a full corporate breach — chain SQLi, IDOR, LFI, insecure JWT, and stored XSS through a PHP helpdesk into a weakly-hashed database, then privilege-escala...

Contribute to tiandeyiliushang-sudo/fastjson-1.2.24-TemplatesImpl development by creating an account on GitHub.

基于 Java Attach API（参考 Arthas 原理）的 fastjson safeMode 运行时检测工具。无需重启目标应用、无需修改目标代码，即可在线检测目标 JVM 中 fastjson 的 safeMode 配置状态、AutoType 行为及绕过风险。 - hl0rey/fastjson-safemode-detector

网络安全学习笔记 — CVE 漏洞研究与复现记录. Contribute to chengbochuan3/Security-Blog development by creating an account on GitHub.

Lightweight, dependency-free web vulnerability scanner for common misconfigurations and application flaws. - senseiink/bugseye

网络安全学习笔记 | DVWA漏洞复现 + 等保2.0 + 安全工具实操. Contribute to Sukimjin/Security-Learning-Notes development by creating an account on GitHub.

Contribute to dennywise/CyberPanel-Authenticated-RCE development by creating an account on GitHub.

An emergency security patch by UBITQUITY to mitigate the unauthenticated SQL injection zero-day vulnerability in GeoServer's jsonArrayContains function. This hotfix sanitizes input paramete...

Empirical Security builds data-driven models that predict which vulnerabilities will actually be exploited, so security teams can prioritize remediation by real-world risk instead of raw CVSS sever...

Bam parser com YARA Rules modificadas e melhoradas - arthurex1/Bam-Parser-Melhorado-WARP-SS

RAT tools use shellcodes for remote access and system control. Shellcode injection and execution techniques bypass defenses, while red team tools focus on compiling and handling payloads for post-e...

Stored XSS vulnerability in codingWithElias school-management-system-php - elshanmammadoov/CVE-PoC-School-Management-System-PHP-XSS

Shellcode development involves creating payloads for post-exploitation tasks like antivirus evasion and UAC bypass. Tools like shellcode loaders and injectors enable execution, while assembly and e...