ludus-defender-lab

Ludus Defender Lab Ludus range config and Ansible roles for a Windows security lab pre-staged for MDE and MDI, with a fully misconfigured ADCS installation for detection coverage testing. Config| VMs| Purpose ---|---|--- zsec-mde-mdi-lab.yml| DC01 + WKS01| MDE/MDI detection lab with ADCS ESC1–ESC...

securitylab

GitHub Security Lab This is the main git repository of GitHub Security Lab. We use it for these main purposes: We share with our community some best practices about security research and vulnerability disclosures in our docs We use issues on this repo to track CodeQL bounty requests. We use it fo...

vulpy

Vulpy - Laboratorio de Seguridad de Aplicaciones Web Vulpy es una aplicación web desarrollada en Python / Flask / SQLite que tiene dos caras. BUENO : Intenta codificar con las mejores prácticas de desarrollo seguro en mente. MALO : Intenta codificar como posiblemente tú. :p Está desarrollado como...

lab_security_apache_spark_emulation_detection

This repository does not have a README...

security-lab

This repository does not have a README...

cve-2023-22515-lab

cve-2023-22515-lab Hands-on security lab demonstrating CVE-2023-22515 — Atlassian Confluence Authentication Bypass using a simulated vulnerable environment...

MSMQ-Vulnerability

MSMQ Security Lab This repository documents a controlled lab review of Microsoft Message Queuing security exposure, focusing on defensive validation, detection evidence, and remediation planning. The project is positioned as a portfolio artefact: it shows how vulnerability research can be...

How we found 24 Android vulnerabilities using our open source AI security agent

With the rise of AI in the security space, our team created the GitHub Security Lab Taskflow Agent as a way for security researchers to easily automate, package, and share the AI prompts and workflows that they find effective for their work. In this blog post, I'll share how I created auditing...

Exploit for CVE-2026-64638

XSS2Shell — CVE-2026-64638 PoC WordPress Pre-Auth XSS → RCE e...

Exploit for OS Command Injection in Php

HTSOC — SOC lab phát hiện CVE-2024-4577 Đây là bộ mã nguồn, c...

Exploit for CVE-2026-20896

CVE-2026-20896 Lab This repository provides a small, self-con...

CVE-2026-39118

creationtimestamp| type| source ---|---|--- 2026-06-29 00:06:56+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mpf6y6iejs2j...

CVE-2026-44168

creationtimestamp| type| source ---|---|--- 2026-06-10 04:57:15+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mnvwdsrfzk2z 2026-06-12 20:06:55+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mo4k43sgrd2h 2026-06-14 01:01:01+00:00| seen|...

CVE-2026-44170

creationtimestamp| type| source ---|---|--- 2026-06-10 04:57:15+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mnvwdsrfzk2z 2026-06-16 19:31:22+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mogjyiuqqy2y 2026-06-16 19:35:18+00:00| seen|...

CVE-2026-41053

creationtimestamp| type| source ---|---|--- 2026-06-04 02:26:12+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mngl44gers2h 2026-06-30 23:17:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116841608371352413 2026-07-03 10:37:06+00:00| seen|...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Lab — React Server Components RCE !Dockerh...

exploit-lab

Threadbare — Exploit-Development Training Lab Introduction...

web-app-security-lab

Vulnerable Web App — Attack & Defend Lab A deliberately-vulne...

CVE-2026-44791

creationtimestamp| type| source ---|---|--- 2026-05-20 00:16:19+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mmamu5rnds2m 2026-06-24 17:03:17+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mp2fh36qon2j 2026-09-30 08:50:09+00:00| seen|...

CVE-2026-44789

creationtimestamp| type| source ---|---|--- 2026-05-20 00:16:19+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mmamu5rnds2m 2026-06-24 17:03:05+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mp2fgmz2rn2o 2026-06-27 10:07:08+00:00| seen|...