labs-releases

Elastic Security Labs - الإصدارات هذا المستودع هو موطن للأدوات، ومستخرجي الإعدادات، ومساهمات أخرى لمجتمع أمن المعلومات، وصيد التهديدات، وباحثي البرمجيات الخبيثة، وتحليل الاستخبارات. في Elastic، نؤمن بأن الانفتاح والشفافية أمران حاسمان لنجاحنا ونجاح مستخدمينا. اطّلع على مقالنا في المدونة إذا كنت...

security-labs-pocs

أبحاث وأكواد إثبات المفهوم من Datadog Security Labs يحتوي هذا المستودع على معلومات وأكواد استغلال وعينات برمجيات ضارة وسكربتات من Datadog Security Labs. الهدف يهدف هذا المستودع إلى توفير أكواد استغلال لإثبات المفهوم وعينات برمجيات ضارة وعروضًا تقنية لمساعدة المجتمع على الاستجابة للتهديدات. قد...

CVEs

Rhino CVE Proof-of-Concept Exploits A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs. CVE-2026-46546: Frappe LMS Header Tag Injection Leading to Open Redirect CVE-2026-39405: Frappe LMS Path Traversal in SCORM Package Upload Leading to...

dirtypipe-container-breakout-poc

Dirty Pipe Container Escape स्थानांतरित किया गया: https://github.com/DataDog/security-labs-pocs/tree/main/proof-of-concept-exploits/dirtypipe-container-breakout...

PurpleCloud

दस्तावेज़ीकरण विभिन्न Azure सुरक्षा प्रयोगशालाएँ बनाने के लिए Terraform कोड जनरेटर। पूर्ण दस्तावेज़ीकरण के लिए देखें: https://www.purplecloud.network परिवर्तन सूची 10/18/24: अद्यतन Azure Sentinel जनरेटर अद्यतन AADDiagnostic सेटिंग लॉग श्रेणियाँ sentinel.py पर: LAW को लॉगिंग और भेजने के लिए और अधि...

CVE-2024-46506

CVE-2024-46506 यह CVE-2024-46506 के लिए एक स्वतंत्र Python कार्यान्वयन है। मैंने यह स्क्रिप्ट इसलिए बनाई क्योंकि मुझे केवल Metasploit मॉड्यूल मिला और मुझे एक हल्का, पोर्टेबल संस्करण चाहिए था जिसमें पूर्ण Metasploit Framework की आवश्यकता न हो। अस्वीकरण यह उपकरण केवल शैक्षिक उद्देश्यों और अधिकृत...

web-security-labs

🌐 Sasidhar C — Web Security Labs Hands-on web security labs a...

Security-labs

Security Labs — Complete Portfolio Student: Waseem Env...

WordPress ProSolution WP Client plugin <= 2.0.10 - Unauthenticated Arbitrary File Upload via Content-Disposition Header Filename Override vulnerability

Unauthenticated Arbitrary File Upload via Content-Disposition Header Filename Override vulnerability discovered by Nir Yehoshua - cipher security labs in WordPress Plugin ProSolution WP Client versions = 2.0.10...

offensive-security-labs

Offensive Security Labs A collection of hands-on offensive cy...

BoxPwnr v0.4.0

BoxPwnr A fun experiment to see how far Large Language Models LLMs can go in solving CTF challenges and security labs on their own. It started with HackTheBox and now covers many platforms and agentic solvers. BoxPwnr provides a plug and play system that can be used to test performance of differe...

ctf-writeups

CTF Writeups Writeups from authorized OffSec labs, with more...

zero2shell-50

ZeroToShell-50 🚀 A highly curated, containerized training g...

CVE-2025-15033

creationtimestamp| type| source ---|---|--- 2026-03-06 20:09:04+00:00| seen| https://github.blog/security/how-to-scan-for-vulnerabilities-with-github-security-labs-open-source-ai-powered-framework/...

GHSA-C8XF-3J86-7686

creationtimestamp| type| source ---|---|--- 2026-03-06 20:09:04+00:00| seen| https://github.blog/security/how-to-scan-for-vulnerabilities-with-github-security-labs-open-source-ai-powered-framework/...

GHSA-W6VW-MRGV-69VF

creationtimestamp| type| source ---|---|--- 2026-03-06 20:09:04+00:00| seen| https://github.blog/security/how-to-scan-for-vulnerabilities-with-github-security-labs-open-source-ai-powered-framework/ 2026-03-10 23:10:58+00:00| seen|...

GHSA-87FH-RC96-6FR6

creationtimestamp| type| source ---|---|--- 2026-03-06 20:09:04+00:00| seen| https://github.blog/security/how-to-scan-for-vulnerabilities-with-github-security-labs-open-source-ai-powered-framework/...

CVE-2026-25758

creationtimestamp| type| source ---|---|--- 2026-02-05 13:49:28+00:00| published-proof-of-concept| https://github.com/spree/spree/security/advisories/GHSA-87fh-rc96-6fr6 2026-03-06 20:09:04+00:00| seen|...

CVE-2026-25757

creationtimestamp| type| source ---|---|--- 2026-02-05 13:46:30+00:00| published-proof-of-concept| https://github.com/spree/spree/security/advisories/GHSA-p6pv-q7rc-g4h9 2026-03-06 20:09:04+00:00| seen|...

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

This repository is a collection of proof-of-concept PoC exploits from Datadog Security Labs. The exploits are designed to demonstrate vulnerabilities in various software products, including Confluence, OpenSSL, and Spring. The repository contains code and instructions for running the exploits, as...