PoC for CVE-2026-19632 - TranslatePress – Multilingual <= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link Disclosure - DeadExpl0it/CVE-2026-19632-POC

Lab keamanan siber berbasis Kali Linux & Docker dengan dukungan GUI—siap untuk belajar Nmap, Wireshark, Burp Suite, dan Metasploit secara terisolasi. 🛡️🐳 - yogaananda6677/workspace_cyber

多引擎搜索结果钓鱼防护 Chrome 扩展 —— 自动标记并隐藏仿冒官网的钓鱼网站. Contribute to Lu-yanmo/phishshield development by creating an account on GitHub.

在主机疑似失陷、挖矿、被植入 Webshell/Rootkit、发生横向移动等场景下，60 个模块 **5 分钟内输出完整应急排查报告**（终端大屏 / 纯文本日志 / JSON 结构化 / HTML 可视化）。 - MindCatcher69/linux_ir

FilteredObjectInputStream allowlist bypass via java.rmi.MarshalledObject, auto-triggered during Log4jLogEvent deserialization, leading to unauthenticated RCE on serialized log receivers. - striga-a...

Proof-of-concept kernel exploit for GhostLock (CVE-2026-43499) on the Infinix Hot 70. - rsyzee/ghostlock-infinix-hot70

独立开发的AI渗透测试平台，涵盖红队打点、SRC、CTF，希望能给社区带来点真正能用的东西. Contribute to Bouquets-ai/StrikeAgent_AtkBrain-Flash development by creating an account on GitHub.

PentestingHere Academy lab: unsandboxed Twig SSTI to RCE - pentestinghere-labs/noteforge-greeting-template-rce

Contribute to xndadelin/hacker-for-a-day-reflected-xss-lab development by creating an account on GitHub.

PentestingHere Academy lab: DOM XSS via a naive client-side filter - pentestinghere-labs/lumen-realty-dom-xss-filter-bypass

PentestingHere Academy lab: stored XSS via a trusted upload Content-Type - pentestinghere-labs/vaultdocs-export-polyglot

独立开发的AI渗透测试平台，涵盖红队打点、SRC、CTF，希望能给社区带来点真正能用的东西. Contribute to Bouquets-ai/StrikeAgent-AtkBrain-Flash development by creating an account on GitHub.

linux 权限提升漏洞靶场：13 个独立 Docker 漏洞环境，每个环境包含一键利用脚本、手动分步教学与原理详解，开箱即用，镜像加速 - picodoki/linux-privesc-lab

Redis TLS Pending-List UAF RCE PoC (v12-security) - 7-stage heap exploit, /bin/sh -c via DEBUG CRASH-AND-RECOVER; for authorized security testing - HackSpeak/redis-tls-uaf

PoC for CVE-2025-2945 — pgAdmin 4 authenticated eval() injection RCE, CVSS 9.9 - Khashayarnzk/CVE-2025-2945-pgAdmin-RCE

CVE-2026-75604 (Next.js Windows RCE) PoC - unauthenticated RCE via cache path traversal + forged Server Action; for authorized security testing - HackSpeak/CVE-2026-75604

Passive surface-security scanner for web apps — enter a URL, get a security grade mapped to the Agent Security Playbook. SSRF-guarded, nothing stored. - MohammedAl-Alimi/is-my-app-safe

Contribute to rajbhadrannavar17/Burp-Extension development by creating an account on GitHub.

Remote Code Execution Engine with Spring Boot & Docker - anshullakra007/Distributed-Code-Execution-Engine

FFind — self-hosted static malware analysis for analyst-reviewed YARA and Falcon LogScale detection content - Forrof/FFind