5124 matches found
digital-forensics-lab
Laboratorio de Informática Forense y Repositorio Compartido de Inteligencia Forense Cibernética Características del Repositorio Laboratorios interactivos de informática forense: Diseñados para la participación de estudiantes y profesores Entorno de laboratorio centrado en Linux: Utiliza Kali Linu...
web-hacking-playground
Web Hacking Playground Descripción Web Hacking Playground es un entorno controlado de hacking web. Consta de vulnerabilidades encontradas en casos reales, tanto en pentests como en programas de Bug Bounty. El objetivo es que los usuarios puedan practicar con ellas, y aprender a detectarlas y...
pentest_lab
Pentest Lab Ya no estoy desarrollando activamente esto, pero corregiré errores y revisaré issues y pull requests. Se agradece la ayuda : Este laboratorio de pentest local utiliza docker compose para levantar múltiples servicios víctimas y un servicio atacante que ejecuta Kali Linux. Si ejecutas...
CVE-2026-94503: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in PX-lab Zombify zombify allows Upload a Web Shell to a Web Server.This issue affects Zombify: from n/a through 1.7.7...
3 lessons from frontier AI vulnerability research
In this article 1. Shift 1. From frontier capability to scale 2. Shift 2. From token consumption to reasoning economics 3. Shift 3. Validation and remediation as a continuous learning loop 4. Transferring security research to help open source projects 5. Open-source vulnerability reporting snapsh...
CPENT-iLabs
🛡️ CPENT v2 iLabs — Practical Penetration Testing Vault !Ce...
CEH-v13
🛡️ CEH v13 Master Vault — Certified Ethical Hacker Study & Lab...
VulnCheck KEV: CVE-2026-94503
Unrestricted Upload of File with Dangerous Type vulnerability in PX-lab Zombify zombify allows Upload a Web Shell to a Web Server.This issue affects Zombify: from n/a through 1.7.7...
add-staves (>=0.1.1, <=0.2.4), agentix-agent-sdk (0.1.0) +135 more potentially affected by CVE-2026-102999 via pypdf (4.3.1)
pypdf PYPI version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - add-staves =0.1.1, =0.0.1, =0.0.1.dev1, =3.0.0, =0.1.0, =1.0.0, =0.3.8.0, =0.3.2, =0.1.6, =1725528079.0.0, =0.1.4, =0.1.9 and more Source cves:...
add-staves (>=0.1.1, <=0.2.4), agentix-agent-sdk (0.1.0) +135 more potentially affected by CVE-2026-102996 via pypdf (4.3.1)
pypdf PYPI version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - add-staves =0.1.1, =0.0.1, =0.0.1.dev1, =3.0.0, =0.1.0, =1.0.0, =0.3.8.0, =0.3.2, =0.1.6, =1725528079.0.0, =0.1.4, =0.1.9 and more Source cves:...
metasploitable-exploitation-lab
Exploitation Lab — Attacking Metasploitable 2 with Kali & Meta...
add-staves (>=0.1.1, <=0.2.4), agentix-agent-sdk (0.1.0) +135 more potentially affected by CVE-2026-103000 via pypdf (4.3.1)
pypdf PYPI version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - add-staves =0.1.1, =0.0.1, =0.0.1.dev1, =3.0.0, =0.1.0, =1.0.0, =0.3.8.0, =0.3.2, =0.1.6, =1725528079.0.0, =0.1.4, =0.1.9 and more Source cves:...
cve-poc-lab
CVE PoC Lab 보안 학습/검증 목적으로 주요 CVE 취약점을 재현PoC하는 모음집입니다. 재현 환경...
METIS
METIS - Modular Exploitation & Threat Intelligence Framework...
Scope Guard (PowerShell)
Exit when the callback host is outside the embedded lab scope !/usr/bin/env python3 -- coding: utf-8 -- from typing import Any, Dict, List from kittysploit import class ModulePrestage: PRESTAGEID = "scopeguard" info = "name": "Scope Guard PowerShell", "description": "Exit when the callback host i...
How we found 24 Android vulnerabilities using our open source AI security agent
With the rise of AI in the security space, our team created the GitHub Security Lab Taskflow Agent as a way for security researchers to easily automate, package, and share the AI prompts and workflows that they find effective for their work. In this blog post, I'll share how I created auditing...
segmented-pentest-lab
Segmented Pentest Lab A self-built, Docker-based segmented ne...
PT-2026-98992
JupyterLab pip package 'jupyterlab' versions =4.1.0,=4.6.0,=4.6.1 contain a plugin manager lock-rule enforcement bypass. Two server-side enforcement gaps allow an authenticated user to circumvent administrator lock rules by making direct requests to the /lab/api/plugins endpoint, enabling or...
AI-powered fuzzing with the GitHub Security Lab Taskflow Agent
If you 're new to fuzzing and want to learn the fundamentals first, check out our Fuzzing 101 course at gh.io/fuzzing101. Continuous fuzzing is not a magic solution that solves all your problems . Even projects that have been enrolled in OSS-Fuzz for years can still hide critical bugs, and the...