418 matches found
securitylab
GitHub Security Lab This is the main git repository of GitHub Security Lab. We use it for these main purposes: We share with our community some best practices about security research and vulnerability disclosures in our docs We use issues on this repo to track CodeQL bounty requests. We use it fo...
vulpy
Vulpy - Web Application Security Lab Vulpy is a web application developed in Python / Flask / SQLite that has two faces. GOOD : Tries to code with secure development best practices in mind. BAD : Tries to code like possibly you. :p Is developed has a laboratory for the following courses: Secure...
MSMQ-Vulnerability
MSMQ Security Lab This repository documents a controlled lab review of Microsoft Message Queuing security exposure, focusing on defensive validation, detection evidence, and remediation planning. The project is positioned as a portfolio artefact: it shows how vulnerability research can be...
ludus-defender-lab
Ludus Defender Lab Ludus range config and Ansible roles for a Windows security lab pre-staged for MDE and MDI, with a fully misconfigured ADCS installation for detection coverage testing. Config| VMs| Purpose ---|---|--- zsec-mde-mdi-lab.yml| DC01 + WKS01| MDE/MDI detection lab with ADCS ESC1–ESC...
lab_security_apache_spark_emulation_detection
This repository does not have a README...
security-lab
This repository does not have a README...
cve-2023-22515-lab
cve-2023-22515-lab Hands-on security lab demonstrating CVE-2023-22515 — Atlassian Confluence Authentication Bypass using a simulated vulnerable environment...
seclab-taskflow-agent
GitHub Security Lab Taskflow Agent The Security Lab Taskflow Agent is an MCP-enabled multi-Agent framework for declarative, YAML-driven agentic workflows. Built on top of the OpenAI Agents SDK, it uses Pydantic for grammar validation and Jinja2 for template rendering. Core Concepts The Taskflow...
How we found 24 Android vulnerabilities using our open source AI security agent
With the rise of AI in the security space, our team created the GitHub Security Lab Taskflow Agent as a way for security researchers to easily automate, package, and share the AI prompts and workflows that they find effective for their work. In this blog post, I'll share how I created auditing...
AI-powered fuzzing with the GitHub Security Lab Taskflow Agent
If you 're new to fuzzing and want to learn the fundamentals first, check out our Fuzzing 101 course at gh.io/fuzzing101. Continuous fuzzing is not a magic solution that solves all your problems . Even projects that have been enrolled in OSS-Fuzz for years can still hide critical bugs, and the...
cybersecurity-network-security-lab
cybersecurity-network-security-lab Demonstrates two...
Kioptrix-Lvl1-Exploitation
No d...
Exploit for CVE-2026-64638
XSS2Shell — CVE-2026-64638 PoC WordPress Pre-Auth XSS → RCE e...
Exploit for OS Command Injection in Php
HTSOC — SOC lab phát hiện CVE-2024-4577 Đây là bộ mã nguồn, c...
Exploit for CVE-2026-20896
CVE-2026-20896 Lab This repository provides a small, self-con...
