SubMon

SubMon Some say bug bounty isn't just about finding bugs, but being the "first" to find them. I'm building this tool to notify hunters when new subdomains appear. Features You can add your favorite target: name + domain. Then you can either click scan or schedule a scan. When the scan finishes, y...

CVE-2025-21756

CVE-2025-21756 — Exploitation Lab For educational and authorized security research purposes only. Description CVE-2025-21756 is a use-after-free UAF vulnerability in the Linux kernel's vsock Virtual Socket subsystem, disclosed on February 26, 2025. It allows a local attacker to escalate privilege...

TakeOver-v1

TakeOver-v1 What is Subdomain Takeover? Subdomain Takeover is a type of vulnerability that arises when a subdomain points to an external service that has been deleted or is no longer in use. Common examples of these external services include Github, Heroku, Gitlab, and Tumblr. In this scenario, a...

CVE-2022-22629

CVE-2022-22629 Proof of concept This post is about the poc for the WebGL bug that was patched in Safari 15.4 security updates. If you want to learn in detail about how WebGL works, you can use this official resource since we are going to discuss bug specific details here :...

megplus

meg+ Deprecated Automated reconnaissance wrapper — TomNomNom's meg on steroids. Built by TomNomNom and EdOverflow. About This wrapper will automate numerous tasks and help you during your reconnaissance process. The script finds common issues, low hanging fruit, and assists you when approaching a...

tryhackme-monikerlink-writeup

TryHackMe: Moniker Link — CVE-2024-21413 Walkthrough A full walkthrough of TryHackMe's "Moniker Link" room: weaponizing CVE-2024-21413, a 2024 Microsoft Outlook vulnerability, to steal a victim's NTLMv2 hash the moment they click a link in a phishing email — no macro, no attachment, no obvious...

patch-diffing-in-the-dark

Patch Diffing In The Dark A series of blog posts leveraging CVE analysis and patch diffing to discover new vulnerabilities. As revealed in the blog posts, 4 CVEs came from the in-depth study of CVE-2021-1657. TOC Results from CVE-2021-1657: Part 1 - Patch Diffing In The Dark Part 2 - Down the...

CVE-2025-55182-Simple-Scanner-main

CVE-2025-55182: React Server Components RCE Scanner A comprehensive toolkit for detecting and exploiting CVE-2025-55182 , a Critical Remote Code Execution vulnerability in Next.js applications using React Server Components. This repository features a unified Bash scanner Single & Mass mode,...

CVE-2022-21789

testingAndroiddriver bug i reported but someone reported first Scripts based on pwnkernel Building the kernel, busybox, and demo modules: $ ./build.sh Running the kernel: $ ./launch.sh All modules will be in /, ready to be insmoded, and the host's home directory will be mounted as /home/ctf in th...

subscraper

SubScraper Overview :smallbluediamond: Usage :smallbluediamond: Contribute SubScraper is a subdomain enumeration tool that uses a variety of techniques to find subdomains of a given target. Subdomain enumeration is especially helpful during penetration testing and bug bounty hunting to uncover an...

bug-bounty-standards

What is This Repository? This repository is a list of situations that occur in bug bounty programs and how they should be handled. Many of these are currently handled on a case-by-case basis, which leads to a lot of uncertainty and frustration from hackers, program owners and platforms. The goal ...

Recon

👑 Recon 👑 The step of recognizing a target in both Bug Bounties and Pentest can be very time-consuming. Thinking about it, I decided to create my own recognition script with all the tools I use most in this step. All construction of this framework is based on the methodologies of @ofjaaah and...

-vercel-prod.yml-application-is-vulnerable-to-CVE-2025-66478.

-vercel-prod.yml-application-is-vulnerable-to-CVE-2025-66478. bug bounty...

50-Days-Of-SQLi

50-Days-Of-SQLi Q. Why I am starting this? I have always struggled as a bug hunter. Whenever I read anything new I learn from it but hardly implement it. And because of that whenever I read anything now, it feels like I know it and so couldn't digest complete information that the writeup has to...

Bug-Bounty-Beginner-Roadmap

Please don't hesitate to contribute to this repo! Bug Bounty Beginner's Roadmap Hi! I'm Ansh Bhawnani. I am currently working as a Security Engineer and also a part time content creator. I am creating this repository for everyone to contribute as to guide the young and enthusiastic minds for...

wordpress-batch-rce-lab

wp2shell: WordPress Batch RCE A technical breakdown of CVE-2026-63030, a logic bug in WordPress core's REST API batch endpoint that lets an anonymous request dispatch under a different request's route and permission check, chaining into CVE-2026-60137 SQL injection for unauthenticated remote code...

CVE-2015-0235

CVE-2015-0235 glibc gethostbyname bug...

cve-2021-29627

CVE-2021-29627 Some code to trigger the bug incl. macsetfd spray. Need some spray target, though...

cve-2025-32463

CVE-2025-32463-sudo-chwoot PoC for CVE-2025-32463 - Sudo chroot Elevation of Privilege Vulnerability Original PoC sudo-chwoot.sh CTF Demo chwoot-demo.c Docs Write-up: https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot Advisory:...

CVE-2026-31431

Copy Fail CVE-2026-31431 - Comprehensive Writeup 1. Vulnerability Overview Vulnerability Name: Copy Fail CVE Identifier: CVE-2026-31431 Discovered By / Authors: Xint Code Research Team building upon initial foundational research by Theori researcher Taeyang Lee. "Copy Fail" is a critical logic...