VulnFanatic-NG

VulnFanatic-NG LLM-assisted vulnerability research for Binary Ninja. VulnFanatic-NG adds a sidebar panel that scans the current binary and asks an LLM — a locally hosted OpenAI-compatible model by default, or Anthropic Claude, Google Gemini, or Azure OpenAI see LLM backends — to judge whether...

research-labs

Researcher's labs This repository contains a number of intentionally vulnerable applications that you can use to explore vulnerabilities found by PortSwigger Research. Note that you can find many free online labs designed by PortSwigger Research in the Web Security Academy. Table of contents...

CVE-2015-2546-Exploit

CVE-2015-2546-Exploit My paper about CVE-2015-2546： http://bobao.360.cn/learning/detail/3184.html My blog：http://whereisk0shl.top...

CTF-Write-ups

CTF-Write-ups Some CTF Write-ups Follow us on...

melee

MELEE: A Tool to Detect Ransomware Infections in MySQL Instances Attackers are abusing MySQL instances for conducting nefarious operations on the Internet. The cybercriminals are targeting exposed MySQL instances and triggering infections at scale to exfiltrate data, destruct data, and extort mon...

bughunters

bughunters.google.com resources This repository hosts resources aimed to help the Google Bug Hunting community conduct security research as part of Google's vulnerability reward programs featured at https://bughunters.google.com/. Google VRP Domain Tiers OSS VRP OSS VRP Repository Tier List Patch...

rupture

Rupture Rupture is a framework for easily conducting BREACH and other compression-based attacks. Authors Rupture is developed by: Dimitris Karakostas [email protected] Dionysis Zindros [email protected] Eva Sarafianou [email protected] Dimitris Grigoriou [email protected] This...

tandasat.github.io

System Programming Lab Our Training Our next public Hypervisor Development class is: Date: Oct 12 - 15, 2026 4 days Time: 8am - 4pm PDT/UTC-7 Format: Remote Register at RegFox If you want to receive future class schedule announcements, subscribe to our mailing list by sending an empty email to...

React2shell-Research

React2shell-Research Analyze and reproduce CVE-2025-55182...

CVE-2021-3156

CVE-2021-3156 Root shell PoC for CVE-2021-3156 no bruteforce For educational purposes etc. Tested on Ubuntu 20.04 against sudo 1.8.31 All research credit: Qualys Research Team Check out the details on their blog. You can check your version of sudo is vulnerable with: $ sudoedit -s Y. If it asks f...

gha-lab-6255f5fc33

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of gradio-app/gradio at commit...

semgrep-rules

Trail of Bits public Semgrep rules This repository contains Semgrep rules developed by Trail of Bits and made available to the public. They are part of our ongoing development efforts and are used in our security audits, vulnerability reseach, and internal projects. They will evolve over time as ...

CVE-2026-48907

CVE-2026-48907 - Proof of Concept PoC ⚠️ Disclaimer This repository is created for educational and security research purposes only. The author does not condone or support any unauthorized or malicious use of this code. Use it only in environments where you have explicit permission to test security...

security-portfolio-chris-peterson

security-portfolio-chris-peterson My portfolio showcasing vulnerability research CVE-2026-11989, CVE-2026-11395 and automated threat orchestration engineering Lucius Engine, TalonVigil...

CVE-2021-26084_GoPOC

CVE-2021-26084GoPOC PoC of CVE-2021-26084 written in Golang based on https://twitter.com/jas502n/status/1433044110277890057?s=20...

onedrive_user_enum

onedriveuserenum v2.10 enumerate valid onedrive users For a full rundown of the enumeration technique and OneDrive enum, check out the blog here: https://www.trustedsec.com/blog/onedrive-to-enum-them-all/ If you are looking for the old, non-database vesion of OneDrive Enum, you can find it here:...

NextJS-CVE-2025-29927-Docker-Lab

🚨 NextJS-CVE-2025-29927-Docker-Lab This repository contains a Docker-based lab environment to explore and demonstrate the Next.js CVE-2025-29927 vulnerability in a controlled setting. ⚠️ DISCLAIMER: This lab is for educational and security research purposes only. Do not expose it to the public...

CVE-2026-8037

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...

ipsw-diffs

ipsw-diffs IPSW Diffs DIFFS Quick Nav: iOS 26.6 · iOS 27.2 beta · iOS 27.0 · iOS 27.0 beta · iOS 26.7 · iOS 26.6 beta · iOS 26.5 · iOS 26.5 beta · iOS 26.4 · iOS 26.4 beta · iOS 26.3 · iOS 26.3 beta · iOS 26.2 · iOS 26.1 beta · iOS 26.0 · iOS 26.0 beta · iOS 18.7 · iOS 18.6 · iOS 18.5 beta · iOS...

CVE-2025-55182-Exploit-extension

RSC Fingerprint Detector A Chrome extension for detecting React Server Components RSC and Next.js App Router fingerprints on web pages. ⚠️ Important Notice This extension is intended for educational and security research purposes only. It includes functionality that may be used to test for...