外贸网站安全扫描器 — 一行命令出报告，漏洞+评分+修复方案。专为中国中小外贸网站设计，零门槛零依赖。 - dongbofale/tradeguard

Contribute to Daddypool-44418/xss-learning-log development by creating an account on GitHub.

Educational CTF lab recreating the July 2026 autonomous AI agent intrusion at Hugging Face. Sandbox escape → SSRF → HDF5 file read → Jinja2 SSTI → Kubernetes lateral movement → supply chain pivot. ...

Autonomous AI-driven penetration testing framework with real-time tool orchestration, operator-confirmed exploit execution, attack surface management, and automated report generation. - nickpupp0/E...

PoC + analysis for CVE-2026-54917 — SeaweedFS S3 gateway cross-bucket path traversal (CVSS 10.0, <4.30). Read/write any bucket via .. in the object key. - BiiTts/CVE-2026-54917-SeaweedFS-Cro...

Defensive detection & mitigation tool for CVE-2026-31431 ("Copy Fail") — Linux kernel algif_aead LPE. No exploit code included. - joaocalciolari07/copyfail-guard

【Java计算机毕业设计分享】基于SSM的漏洞扫描器管理系统，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - q015r4obh2/FGRdlWYVDO

A production-grade, zero-trust security library for Node.js & TypeScript. Defends against OWASP Top 10, Prototype Pollution, XSS, SQLi, and Path Traversal with WebAuthn, AES-256-GCM, Adapti...

Simulated network vulnerability assessment with CVE detection, CVSS scoring, compliance checking, and remediation guidance - Freddricklogan/network-vulnerability-scanner

Non-destructive proof-of-concept and verification harness for **CVE-2026-60137**, a blind SQL injection in WordPress core (`WP_Query::author__not_in`), reachable via the REST API's `author_...

A deliberately vulnerable Spring Boot application used to develop and validate the Capstone vulnerability scanner. It provides predictable browser and API findings for Dynamic Application Security ...

A practical SSRF security lab featuring real-world bypass techniques, cloud metadata simulation, DNS rebinding, and secure SSRF defenses. - usfa7med/ssrf-lab

DevAI RCE PoC. Contribute to mindbleed/rce-poc development by creating an account on GitHub.

【Java计算机毕业设计分享】基于Shiro框架的渗透测试管理系统，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - owenbrave/KcIcjbJE

My corner of the internet. HTB writeups, red team notes, and AV/EDR evasion research. - darkness215/RadiantSec

Recursive file triage tool that inspects content and structure (PDF, Office, PE/ELF, archives, email) for suspicious contradictions - Paspke/FileTriage

【Java计算机毕业设计分享】基于SSM的漏洞扫描器管理系统，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - px2ysv789z/vNKcduoIWW

Investigating L3/L4 network isolation techniques on Linux to constrain DNS-based exfiltration and DoH covert channels. This experimental architecture explores kernel-level routing and Anycast boots...

End-to-End exploitation of a commercial Netgear Router: from Web Command Injection (RCE) to persistent Telnet access and MIPS bare-metal C execution. - arhip4043-cell/Embedded-Router-Exploitation

CVE-2026-60004 — Gitea <= 1.27.0 Pre-Auth RCE . Contribute to Sachinart/CVE-2026-60004-gitea-0day development by creating an account on GitHub.