backdoor-learning-resources

Backdoor Learning Resources This Github repository summarizes a list of Backdoor Learning resources. For more details and the categorization criteria, please refer to our survey. We will try our best to continuously maintain this Github Repository in a monthly manner. Why Backdoor Learning?...

awesome-cybersecurity-blueteam

Awesome Cybersecurity Blue Team A collection of awesome resources, tools, and other shiny things for cybersecurity blue teams. Cybersecurity blue teams are groups of individuals who identify security flaws in information technology systems, verify the effectiveness of security measures, and monit...

DVFaaS-Damn-Vulnerable-Functions-as-a-Service

DVFaaS - Damn Vulnerable Functions as a Service A DHIY Deploy and Hack It Yourself Project that you can deploy and run a bunch of 'orribly insecure functions on AWS Lambda Objective and Audiences We at we45 do a lot of training around Serverless Security, Cloud and security of modern web stacks. ...

CVE-2026-84645

CVE-2026-84645 — Jenkins PersistenceRoot Deserialization RCE SECURITY-3972 PoC for the Jenkins deserialization vulnerability fixed on 2026-09-02 advisory. A low-privileged account holding Item/Configure on any single job can turn that into arbitrary code execution as the Jenkins OS user...

NPMAnalysis

Introduction Recently, security incidents related to NPM poisoning attacks have been emerging one after another. When such incidents occur, the affected NPM packages are often removed or unpublished from the NPM registry, making subsequent security analysis difficult. Based on this situation, a...

cve-2023-43208-poc

Script PoC de Mirth Connect Script simple en Python para investigación de seguridad relacionada con vulnerabilidades de Mirth Connect. Importante Use este proyecto solo en sistemas que posea o para los que tenga permiso explícito por escrito para realizar pruebas. Las pruebas no autorizadas son...

CVE-2019-18935-checker

CVE-2019-18935-checker...

fides

Securing AI Agents with Information-Flow Control This repository contains a Jupyter notebook to accompany the academic paper "Securing AI Agents with Information-Flow Control". The notebook is structured as a tutorial to walk readers through the concepts introduced in the paper. This illustrates ...

CVE-2026-24118

⚠️ Aviso Legal e Investigación de Seguridad 📌 Propósito de Este Repositorio Este repositorio se proporciona estrictamente solo con fines educativos, académicos y de investigación autorizada en ciberseguridad. Está destinado a apoyar la comprensión de: Conceptos de vulnerabilidades de seguridad y...

NextJS-CVE-2025-29927-Docker-Lab

🚨 NextJS-CVE-2025-29927-Docker-Lab このリポジトリは、制御された環境で Next.js CVE-2025-29927 の脆弱性を調査およびデモンストレーションするための Dockerベースのラボ 環境を含んでいます。 ⚠️ 免責事項: このラボは教育およびセキュリティ研究目的のみに使用されます。パブリックインターネットに公開したり、本番環境で使用したりしないでください。 📦 特徴 ✅ 脆弱なNext.jsアプリケーション ✅ Dockerでコンテナ化 ✅ CVE-2025-29927のローカルテスト用に設計 ✅ 事前設定済みのルートとUIを含む ✅...

atomicvulns

⚠️ Intentionally vulnerable. Run locally only. Never expose to the internet or a shared network. Read this in other languages: Português Brasil What is atomicvulns? Milestone — v1.0: atomicvulns now covers all ten OWASP Top 10 2021 categories A01–A10 , across 38 atoms. See the v1.0 release...

CVE-2026-68820

cve-id Donar Apoya el mantenimiento de este proyecto con PayPal o escaneando el código QR a continuación. ⚡ Uso sencillo Utiliza este proyecto únicamente en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Entornos de laboratorio aislados Entornos de pruebas de...

log4j-2021-vulnerability-study

log4j-2021-vulnerability-study Esta es una demostración de cómo se podría explotar la vulnerabilidad Log4J CVE-2021-44228. Este código es seguro de ejecutar, pero ¡entiende qué hace y cómo funciona!...

bug-bounty-library

Bug Bounty / Original Findings Library Folders are numbered in the order a hunter actually works - first to last. Start at 00-hunt/00-INDEX. Run the hunt from 00-hunt/ALPHA. This README is only the map. Authorization only. Safe harbor, VDP, GitHub PVR, or coordinated disclosure. No other-customer...

agentic-dm-gateway

Agentic DM Gateway Security control plane for LLM agents over private chat typically Discord DMs. It sits in front of your agent. It decides who may talk, whether the session is unlocked, whether the process is paused, and whether this message is safe enough to forward. Your model and tools stay...

offensive-one-liners

offensive-one-liners Jean Miélot at his desk. Public domain. A notebook of 110 offensive security one-liners for authorized testing, CTFs, bug bounty, and lab research. Organized into one markdown notebook with 12 sections. Each entry is a full command or tight pipeline, not a stub. See...

NoiseHound

NoiseHound...

Sandb0x-Xtract0r

SandB0x-Xtract0r An automated, cross-platform security analysis engine for safely detonating suspicious files, binaries, and applications. 🎬 Watch the Project Demo 💻 Tech Stack Core Programming Languages, Core Systems !Darthttps://img...

awesome-web3-security

awesome-web3-security A curated list of Web3 Security materials and resources for Pentesters and Bug Hunters. root@kitploit: If you find that some links are not working, you can simply replace the username with gmh5225. Or you can send an issue for me. Show respect to all the projects below,...

Zeek-Intelligence-Feeds

Zeek Intel Threat Feed w/ Combined Indicators This is a public feed based on Public Threat Feeds and CRITICAL PATH SECURITY gathered data. This feed will be updated as often as possible. Getting Started These instructions will get you a copy of the project up and running. Dependencies ZEEK 3.0 or...