pocs

pocs we will release pocs in this repo all bugs in this repo are responsibly disclosed...

yara-x

YARA-X YARA-X is a re-incarnation of YARA, a pattern matching tool designed with malware researchers in mind. This new incarnation intends to be faster, safer and more user-friendly than its predecessor. The ultimate goal of YARA-X is replacing YARA as the default pattern matching tool for malwar...

Facad1ng

If you find this GitHub repo useful, please consider giving it a star! ⭐️ Facad1ng is an open-source URL masking and analysis tool designed for security research, phishing awareness, and defensive testing. It demonstrates how adversaries may disguise malicious links using URL manipulation and...

CVE-2026-43499-pja110

Website: nebusec.ai · Twitter @nebusecurity · Bug list 885+ Latest research IonStack part II : GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years Linux Kernel 📖 Writeup · 🐦 Twitter Longinus : 2 Boundaries in One Bug, Piercing Chrome's Renderer and V8 Sandbox with a...

ronin

ronin Website Source Issues Documentation Discord | Mastodon Description Roninwebsite is a free and Open Source Ruby toolkit for security research and development. Ronin contains many different CLI commands and Ruby librariesronin-rb for a variety of security tasks, such as encoding/decoding data...

GhostESP

The ESP-IDF-native wireless security platform for ESP32. Deep Wi-Fi and BLE assessment, research-grade capture and export, and a real app ecosystem. Built directly on Espressif's ESP-IDF rather than through the Arduino core, so new silicon and radio features land first and there is no abstraction...

pack

Password Analysis and Cracking Kit by Peter Kacherginsky iphelix PACK Password Analysis and Cracking Toolkit is a collection of utilities developed to aid in analysis of password lists in order to enhance password cracking through pattern detection of masks, rules, character-sets and other passwo...

Security-Datasets

Security Datasets The Security Datasets project is an open-source initiatve that contributes malicious and benign datasets, from different platforms, to the infosec community to expedite data analysis and threat research. Docs https://securitydatasets.com Goals Provide open portable datasets to...

Papers

This repository is intended to host my research papers. Put it on watch if you would like to read more from me. Bypassing XSS Detection Mechanisms Download PDF A Phonetic Approach to Calculate Linguistic Information in Text Download PDF...

L0p4Map

L0p4Map Nmap was blind. L0p4Map sees. Professional network monitoring & visualization tool built for security researchers. https://github.com/user-attachments/assets/745eb888-0636-47e8-9293-38a706a8e897 What is L0p4Map? L0p4Map is a professional grade network monitoring tool that combines the pow...

dwarf2json

Introduction dwarf2json is a Go utility that processes files containing symbol and type information to generate Volatility3 Intermediate Symbol File ISF JSON output suitable for Linux and macOS analysis. To build Go 1.18+ required: $ go build To run: $ ./dwarf2json --help Usage: ./dwarf2json...

Mr.SIP

SIP Security, Attack and Audit Framework Mr.SIP is...

securitylab

GitHub Security Lab This is the main git repository of GitHub Security Lab. We use it for these main purposes: We share with our community some best practices about security research and vulnerability disclosures in our docs We use issues on this repo to track CodeQL bounty requests. We use it fo...

Awesome-LLM4Cybersecurity

When LLMs Meet Cybersecurity: A Systematic Literature Review 🔍 Explore 756+ Papers Across 11 Research Categories 📊 RQ1: Domain LLMs | 🎯 RQ2: Applications | 🤖 RQ3: Future Directions Updates 📆2026-06-15 We have updated the related papers up to 2026/06/15 , with 108 new papers added. 📆2026-02-09 We...

cnappgoat

!made-with-Gomade-with-go-img !GitHub Releaserelease-imgrelease !Go Report Cardgo-report-imggo-report !License: Apache-2.0license-imglicense !Maintainermaintainer-1 CNAPPgoat CNAPPgoat is a multi-cloud, vulnerable-by-design environment deployment tool – specifically engineered to facilitate...

Sealighter

Sealighter - Easy ETW Tracing for Security Research I created this project to help non-developers dive into researching Event Tracing for Windows ETW and Windows PreProcessor Tracing WPP. Features Subscribe to multiple ETW and WPP Providers at once Automatically parse events into JSON without...

cve-2021-27065

I will continue to add any new code or modify existing code based on searching for stolen data If you have been compromised these scripts will by no means fix it for you! These provide no benifit to you other than you now knowing the extent of what has happened to your system With that being said...

z3

Z3 Z3 is a theorem prover from Microsoft Research. It is licensed under the MIT license. Windows binary distributions include C++ runtime redistributables If you are not familiar with Z3, you can start here. Pre-built binaries for stable and nightly releases are available here. Z3 can be built...

awesome-web-hacking

awesome-web-hacking This list is for anyone wishing to learn about web application security but do not have a starting point. You can help by sending Pull Requests to add more information. If you're not inclined to make PRs you can tweet me at @infoslack Table of Contents Books Documentation Tool...

hermes-agent

Hermes Agent ☤ Hermes Agent | Hermes Desktop The self-improving AI agent built byNous Research. It's the only agent with a built-in learning loop — it creates skills from experience, improves them during use, nudges itself to persist knowledge, searches its own past conversations, and builds a...