Awesome-BEC

Awesome-BEC Repositorio de información de ataque y defensa para investigaciones de Business Email Compromise Office365/AzureAD ATT&CK O365 ATT&CK Azure Microsoft Azure Threat Research Matrix Microsoft 365 Licensing Microsoft Portals Azure App IDs Microsoft First Party App IDs & Graph Permissions...

CVE-2025-14847-PoC

CVE-2025-14847 Prueba de Concepto Aviso de Investigación Académica y Defensiva Este repositorio contiene una prueba de concepto PoC desarrollada estrictamente para análisis académico, investigación defensiva y fines de validación de vulnerabilidades. El objetivo de este proyecto es ayudar a los...

AI-PASSWORD-TESTING-AGENT

AI Password Attack Orchestrator - Defensive Research Repository ⚠️ LEGAL DISCLAIMER & RESEARCH PURPOSE THIS REPOSITORY IS FOR DEFENSIVE CYBERSECURITY RESEARCH AND EDUCATIONAL PURPOSES ONLY NO EXPLOITABLE CODE - This repository contains only theoretical research, conceptual analysis, and defensive...

CVE-2025-55182-Researching-process

Repositorio de Investigación CVE-2025-55182 Aviso Ético Este repositorio está dedicado exclusivamente a la investigación defensiva en ciberseguridad y fines educativos. Todo el contenido se centra en: Entender vulnerabilidades con fines defensivos Desarrollar mecanismos de detección Implementar...

CVE-2026-21445-PoC

Prueba de Concepto de CVE-2026-21445 Aviso de Investigación Académica y Defensiva Este repositorio contiene una prueba de concepto PoC desarrollada estrictamente con fines de análisis académico, investigación defensiva y validación de vulnerabilidades. El objetivo de este proyecto es ayudar a...

Mass-Scanner-CVE-2026-3891

Escáner Masivo CVE-2026-3891 Una presentación limpia y animada de GitHub para un Escáner Masivo CVE-2026-3891 basado en Python, enfocado en validar un comportamiento específico de AJAX en WordPress dentro de entornos controlados. Este repositorio está destinado estrictamente a pruebas de segurida...

CVE-2026-15583-PoC

CVE-2026-15583 Prueba de Concepto Aviso de Investigación Académica y Defensiva Este repositorio contiene una prueba de concepto PoC desarrollada estrictamente con fines de análisis académico, investigación defensiva y validación de vulnerabilidades. El objetivo de este proyecto es ayudar a...

CVE-2025-55182-Researching-process

CVE-2025-55182 Repositorio de Investigación Aviso Ético Este repositorio está dedicado a la investigación defensiva en ciberseguridad y solo con fines educativos. Todo el contenido se centra en: Entender vulnerabilidades con fines defensivos Desarrollar mecanismos de detección Implementar...

CVE-2025-55182-Researching-process

CVE-2025-55182 Research Repository Ethical Disclaimer This repository is dedicated to defensive cybersecurity research and educational purposes only. All content is focused on: Understanding vulnerabilities for defensive purposes Developing detection mechanisms Implementing mitigation strategies...

Exploit for CVE-2026-63030

wp2r00t - WordPress REST Batch Route-Confusion SQLi PoC A sel...

Exploit for CVE-2026-31431

Copy-Fail---CVE-2026-31431 CVE-2026-31431 "Copy Fail" - Analys...

Exploit-for-OSVDB-75095-LotusCMS-3.0

LotusCMS 3.0 eval RCE — Defensive Research Overview This...

-Exploit-for-OSVDB-75095-LotusCMS-3.0-

LotusCMS 3.0 eval RCE — Defensive Research Overview This...

coruna-exploit-kit-analysis

Coruna iOS Exploit Kit — Reverse Engineering Analysis Def...

Assessing Spear-Phishing Website Generation in Large Language Model Coding Agents

Large Language Models are expanding beyond being a tool humans use and into independent agents that can observe an environment, reason about solutions to problems, make changes that impact those environments, and understand how their actions impacted their environment. One of the most common...

Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft

CVE-2026-21509 — Educational Dummy PoC for Defender Visibility...

📄 Dahua TPC-AEBF5201 P2P Camera ToolsComplete Security Analysis Suite

This PHP proof-of-concept provides defensive tooling to analyze DH-P2P / Easy4IP behaviors observed during DFIR activities. It includes routines to decrypt Account1SecEData, derive device-specific cryptographic keys, and reproduce authentication code generation logic. The project is intended to...

MalGEN: a Generative Agent Framework for Modeling Malicious Software in Cybersecurity

The dual use nature of Large Language Models LLMs presents a growing challenge in cybersecurity. While LLM enhances automation and reasoning for defenders, they also introduce new risks, particularly their potential to be misused for generating evasive, AI crafted malware. Despite this emerging...

Exploit for CVE-2025-37899

This is the artefact repository associated with my blog post Ho...

TiEtwAgent - PoC Memory Injection Detection Agent Based On ETW, For Offensive And Defensive Research Purposes

This project was created to research, build and test different memory injection detection use cases and bypass techniques. The agent utilizes Microsoft-Windows-Threat-Intelligence event tracing provider, as a more modern and stable alternative to Userland-hooking, with the benefit of Kernel-mode...