10 pristine CVE RCE lab targets (vulhub/official images, no flag, no CTF artifact) - internal security research - elonma-china/lab-cve-pristine

This is my e-commerce website project, incorporating technologies and components such as Python, Docker, microservices architecture, and security measures; it serves as a significant milestone in m...

Containerised proof of concept for CVE-2026-119958, the Windows LDAP remote code execution vulnerability of the November 2026 Microsoft security update (CWE-787, CVSS 9.8). Differential lab with vu...

Safe CVE-2026-83844 lab and Microsoft Paint host assessment - zake1god/Paint2Shell

PoC: unauth RCE via Next.js use-cache typed-array framing desync (CVE-2026-126187 / GHSA-xqc2-xf4c-x3h3) | docker compose lab - TahuCryptsi/poc-cve-2026-126187-rsc-usecache-rce

Vuls, the agentless vulnerability scanner, with its scan list built from PuppetDB - albatrossflavour/vuls

"A python based vulnerability scanner designed to identify security weaknesses and potential vulnerabilities in systems." - sriharisha2006-hash/Vulnerability_scanner

Static malware-triage lab demonstrating YARA-based detection of simulated Windows persistence-related strings in an inert PowerShell sample, with benign control testing, SHA-256 hashing, and eviden...

Open-source desktop malware triage, zero-copy PE forensic analyzer, and threat intelligence workbench for Windows - bakhishovism/AegisNode

Containerised PoC for CVE-2026-126147 (Fortinet FG-IR-26-199): a path traversal (CWE-22) in the FortiMail management interface API lets an unauthenticated request write outside the restricted direc...

Containerised PoC for CVE-2026-126148 (Fortinet FG-IR-26-200): an OS command injection (CWE-78) in the FortiMail HA cluster lets one unauthenticated join-request packet reach command execution as r...

Containerised PoC for CVE-2026-126170 (Fortinet FG-IR-26-219): a JSON injection (CWE-116) in the FortiManager/FortiAnalyzer JRPC API lets an unauthenticated crafted request reach command execution ...

jsf programs explanation and guide. Contribute to vardhan23v/java-spring-framework-lab development by creating an account on GitHub.

IT 359- Tools and Techniques in Penetration Testing - tylerfbrown9-jpg/Web-Vulnerability-Scanner---IT-359

Mirror of https://github.com/shadow1ng/fscan at 1.4 - sg-scale/fscan--1.4

CVE-2026-72898 — Mass exploitation & post-exploitation toolkit for Metabase. Session forgery, SQLi, PostgreSQL RCE via COPY TO PROGRAM, file read/write, webshell drop, and credential harves...

Scanner and PoC for CVE-2024-25600, the Bricks Builder WordPress unauthenticated RCE. Detect and verify vulnerable sites. Security research by Oblivion. - OblivionDH/oblivion-cve-2024-25600-scanner

Lightweight Windows web vulnerability scanner — 13 read-only checks, optional intrusive tests, CVSS 3.1 scoring, TXT/HTML/CSV reports. For authorized testing only. - Ryukensaki/VulnLite

BDD test automation suite for an e-commerce store: Java, Cucumber, Selenium and Rest Assured. 49 API and UI scenarios run in CI against the real app in Docker, and 11 more reproduce 10 bugs I found...