This repository is for defensive testing and education. Do not use it against systems without permission.

Please report security issues privately to the maintainers. Do not include live credentials, customer data, production URLs, or exploit output.

Run aggressive tests only in a local lab, staging system, or authorized security engagement. Production-safe examples are designed to validate controls without causing disruption.