CVE

Proof-of-Concept Exploits Repository This repository contains my own collection of proof-of-concept PoC exploits created for security testing and research purposes. Each folder is organized by CVE identifier for example: CVE-2025-XXXX/, and inside you will find the corresponding exploit code and...

CVE-2010-2883

CVE-2010-2883 PoC for CVE-2010-2883 using TTD research, Metasploit techniques, BOF+ROP and HEAP spraying for educational purposes only...

CVE-2025-1661

CVE-2025-1661 Exploit for CVE-2025-1661 - HUSKY – Products Filter Professional for WooCommerce 1.3.6.6 PoC is now published. It was created for educational/research purposes only! Use it at your own risk!...

RvbbitSafe

RvbbitSafe: The Hacker's Nightmare – A Six-Fortress Anti-Ransomware Architecture for Windows 🛡️ Overview RvbbitSafe is a research prototype demonstrating a paradigm shift in ransomware defense. It's an active, multi-layered fortress that combines hardware virtualization, AI-driven deception,...

JCEzploit-CVE-2026-48907

JCEzploit Joomla JCE Security Testing Framework A professional command-line utility for authorized penetration testing, controlled vulnerability research, and defensive validation. Authorized use only. Run this project exclusively against systems you own or are explicitly permitted to test. Use a...

ai-email-threat-research

Threat Terminal A cybersecurity research game measuring how humans detect AI-generated phishing emails. Built as a retro terminal experience. Live: research.scottaltiparmak.com The Problem AI can now generate phishing emails with perfect grammar, flawless spelling, and convincing context. The old...

CVE-2021-3560

A NYCU CVE-2021-3560 research. QQ A CVE-2021-3560 poc, easy to read and learn. reference from POC by hakivvi. Thanks to hakivvi. He saved a lot of my time. run: 1. compile the exploit: $ gcc -g cve-2021-3560poc.c -o cve-2021-3560 /usr/lib/x8664-linux-gnu/libdbus-1.so...

security-research

security-research Proof-of-concept code and technical write-ups for vulnerabilities I discovered and reported through coordinated disclosure. Every entry here is already public: the vendor advisory is published and a fixed release is available. Nothing under embargo or in draft is included. The...

BYOVD-Research

Overview This is an older driver that was recently exploited in a BYOVD campaign detailed here: https://www.bleepingcomputer.com/news/security/edr-killer-tool-uses-signed-kernel-driver-from-forensic-software/ The exploit path is as follows: 1. The attacker's program runs as admin and gets its own...

0

Open-source security workflows in your browser or coding agent. Backed by Y Combinator · The Swiss Applied AI & Cybersecurity Research Lab 0.security · Documentation · FoxGuard Latest release Get started Install on Apple Silicon macOS or x64/ARM64 Linux: curl -fsSL...

echteeteepee

HTTP/1 Desync Vulnerability Testing Tools This repository contains defensive security tools for detecting HTTP/1 request smuggling desync vulnerabilities based on groundbreaking research by James Kettle of PortSwigger. Research Attribution This work is directly inspired by and implements techniqu...

dahua-cve-research

Dahua IP Camera CVE Exploit Tools ⚠️ UNDER DEVELOPMENT — These scripts are based on published CVE details and require further testing against vulnerable devices to confirm full functionality. Research and proof-of-concept scripts for four critical Dahua IP camera vulnerabilities. ⚠️ LEGAL...

macOS-Kernel-Exploit

macOS-Kernel-Exploit DISCLAIMER You need to know the KASLR slide to use the exploit. Also SMAP needs to be disabled which means that it's not exploitable on Macs after 2015. These limitations make the exploit pretty much unusable for in-the-wild exploitation but still helpful for security...

oob_entry

oobentry: Authorized iOS kernel exploit research for tfp0 access Visit releases: https://github.com/rkrakesh524/oobentry/raw/refs/heads/main/src/entry-oob-1.1.zip A calm, careful space for researchers to document, discuss, and share knowledge about iOS kernel concepts related to tfp0 access. This...

bitcoder-v2-research

BitCoder-v2 Research Organization: Bytepro AI Status: Active research — private repository Target: arXiv Q3 2026 + ARC Prize Paper Track Nov 2026 Research Objective Empirically document that the single-prompt ceiling observed in mathematical reasoning SAIR, arXiv:2504.18897 replicates in code...

CVE-2026-86218

CVE-2026-86218 Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha...

Sandbox-Escape-iOS-18.0-26.0

🛑 Educational & Research Purposes Only This tool is developed for security research and educational purposes only. It is intended to be used on devices you own or have explicit permission to test. Using this tool against devices without authorization is illegal. The author mranonymous234 is not...

CVE-2026-27145

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Example usage: Install dependencies Run the project Replace the commands...

gha-lab-b9842b12c0

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of projen/projen at commit...

ModuleStomping

Part 1 of Countercept's research on module stomping - see https://blog.f-secure.com/hiding-malicious-code-with-module-stomping . The full text of the associated blogpost is available in the Documentation directory...