Docker lab + one-payload exploit + defensive scanner for the fastjson 1.2.66-1.2.83 @jsontype remote-class-load RCE (SSRF->defineClass under Spring Boot LaunchedURLClassLoader; autoType OFF; parseObject binding is not a mitigation)

This repository is designed for educational purposes, with real code, real labs, and real-world logic — but zero bullshit.

NTCIP 1202 traffic-signal attack lab: emulated controller + SUMO intersection. snmpset commands drive a live SUMO-GUI window.

Hands-on lab for demonstrating and reporting OWASP Top 10 for LLM vulnerabilities in AI agents.

A multi-industry vulnerable attack surface with 450+ real API endpoints and 12 web apps

Provides a Docker-based lab environment for practicing lateral movement techniques in a safe, isolated network for cybersecurity training and penetration testing exercises.

What's Been Set Up: Complete Codebase - All components implemented and tested Git Repository - Initialized with proper commit history Documentation - Comprehensive guides and API docs GitHub Workflows - CI/CD pipeline with security testing Community Files - Contributing guide, issue templates, PR templates Open Source License

Educational C2 Framework for Red Team Learning

Authorized security-lab script archive for defensive learning, detection review, and isolated experiments.

Detecting the 2026 Claude Code Supply Chain Attack using Splunk, Sysmon, YARA, and Sigma

OpenTofu lab environment that validates AzureFox against a disposable Azure subscription.

Brute force detection and defense in a vulnerable flask login application.

Consent-based location sharing platform (ethical SE lab tool)

Low-cost USB HID automation lab with Raspberry Pi Pico, CircuitPython and controlled input simulation.

[SECURITY LAB] Intentionally vulnerable PKI manager repo — contains leaked CA credentials in git history for training exercises

Built a Python Flask authentication testing lab to demonstrate automated login attempts against a local web application using Python and HTTP POST requests.

Configurable vulnerable web app with OWASP-style scenarios, structured logs and a Python detection engine.

Laboratorio defensivo de analisis y priorizacion de vulnerabilidades con Trivy y OpenVAS

Educational Python lab simulating ransomware and keylogger behavior in a controlled environment, focusing on malware analysis, ethical security research, and defensive strategies.

Educational cybersecurity laboratory with python ransomware and keylogger simulations in controlled environments.