security-demo

GH-300 live demo kit. A real Python app left intentionally immature (bugs, security gaps, low coverage) across 5 structured Copilot modules. Prompt library, Skills, AGENT.md, and a reset script included.

Interactive Jupyter demo of Prisma AIRS detecting pickle deserialization attacks (CWE-502) in ML models. Educational security demonstration with ROI analysis.

Live PoC: MCP attacks that compromise AI agents mid-session and how to block them in a few lines of code.

A simple demo project for Spring Security

Intentionally vulnerable AWS Bedrock chat app for Prisma AIRS Red Teaming demos, with optional AIRS Runtime Security overlay for before/after testing.

💥 ServerSideTemplateInjection (SSTI) Demo with Flask A simple Flask app to demonstrate Server-Side Template Injection vulnerabilities — useful for learning, testing, and understanding how SSTI works and how to avoid it.

Wishlist Member Arbitrary File Read via Directory Travesal <= 3.25.1

Mirror of isaacs/node-tar pinned at 8bb83f7 — the commit before the CVE-2026-23745 fix. Demo target for autonomous vulnerability patching. Do not install from here; use node-tar 7.5.3+.

ProtonVPN Full Free — это надежное и простое приложение для безопасного доступа в интернет без ограничений по времени и объему трафика. Программа надежно шифрует ваше соединение, защищает конфиденциальные данные от перехвата и помогает легко открывать заблокированные сайты, сохраняя вашу полную анонимность в сети.

Educational security demo — brute-force a bcrypt hash to recover a 5-digit numeric PIN. Features a Web Worker-based in-browser cracker and a Python CLI. Clean architecture, tested.

Ethical Monitoring & Surveillance Research: A study on local network surveillance and privacy ethics.

🛡️ Demo: Microsoft Defender for Cloud & GitHub Advanced Security (GHAS) integration - End-to-end vulnerability detection from code to cloud

[INTENTIONALLY VULNERABLE - Mithras demo] Shared cryptographic helpers.

Insurance / underwriting demo — intentionally vulnerable. Part of DevSecAI/arko-demos. Do not deploy.

Pharma / clinical-trials demo — intentionally vulnerable. Part of DevSecAI/arko-demos. Do not deploy.

Retail / e-commerce demo — intentionally vulnerable. Part of DevSecAI/arko-demos. Do not deploy.

Healthcare / EHR demo — intentionally vulnerable. Part of DevSecAI/arko-demos. Do not deploy.

[INTENTIONALLY VULNERABLE - Mithras demo] Facility infrastructure configuration.

GovTech / digital-identity demo — intentionally vulnerable. Part of DevSecAI/arko-demos. Do not deploy.

Spring Security demo project with custom SecurityFilterChain, role-based access, and integration tests