cutter

Cutter Cutter is a free and open-source reverse engineering platform powered by rizin. It aims at being an advanced and customizable reverse engineering platform while keeping the user experience in mind. Cutter is created by reverse engineers for reverse engineers. Learn more at cutter.re. Getti...

Website

The New Oil Mission Statement To educate readers on why privacy and security matter, and the various tools and techniques available to help them reclaim and protect their own privacy & security To empower readers to believe that privacy and security are attainable for everyone and to do their bes...

Malware-Bible

The Indoctrination Welcome to the Malware Bible. Brought to you by The Perkins Cybersecurity Educational Fund. This sacred text was created specifically to guide you on your journey into the realm of cybersecurity. Whether you are seeking to understand, master, or dominate this craft, these sacre...

tools

About This section offers a selection of our fully featured security and hacking tools. We also provide some exploits, proof of concept code, shellcodes and snippets. That means some tools are not tested and may not have the feature set. If you find some bugs or if you have any questions, ideas o...

RAT-via-Telegram

This is not maintained by me any more. For the latest maintained version, check out https://github.com/mvrozanti/RAT-via-Telegram. Disclaimer: This tool and any of its forks are for education/research purposes only. The authors take NO responsibility and/or liability for how you choose to use any...

CVE-2024-27821

CVE-2024-27821 Writeup and PoC of CVE-2024-27821, for education purposes. Writeup: https://snoolie.gay/blog/CVE-2024-27821...

SecGen

Security Scenario Generator SecGen Summary SecGen creates vulnerable virtual machines, lab environments, and hacking challenges, so students can learn security penetration testing techniques. Boxes like Metasploitable2 are always the same, this project uses Vagrant, Puppet, and Ruby to create...

lulzbuster

Description A multithreaded, very fast and smart HTTPS directory and file bruteforcer written in C on top of libcurl. Given a target URL and a wordlist, it enumerates valid paths by firing concurrent HTTP requests and reporting back the responses that look like real hits i.e. status codes the use...

Application-Security-Curriculum

Application-Security-Curriculum Grant Ongers - Scaling AppSec through Education - DEF CON 29 AppSec Village...

red-team-scripts

Red Team Scripts A collection of red teaming and adversary emulation related tools, scripts, techniques, notes, etc. Made for Education purpose only, do not use for illegal purposes...

SecurityExplained

Security Explained SecurityExplained is a new series after the previous learning challenge series Learn365. The aim of SecurityExplained series is to create informational content in multiple formats and share with the community to enable knowledge creation and learning. Below are the various...

haaukins

Haaukins Haaukins is a highly accessible and automated virtualization platform for security education, it has three main components Docker, Virtualbox and Golang, the communication and orchestration between the components managed using Go programming language. The main reason of having Go...

Bug-Bounty-Beginner-Roadmap

Please don't hesitate to contribute to this repo! Bug Bounty Beginner's Roadmap Hi! I'm Ansh Bhawnani. I am currently working as a Security Engineer and also a part time content creator. I am creating this repository for everyone to contribute as to guide the young and enthusiastic minds for...

BLT

OWASP BLT OWASP BLT Bug Logging Tool is a community-driven OWASP Foundation project that develops and maintains open-source tools for structured vulnerability reporting, contributor rewards and security education. Every BLT project lives in this one repository, each in its own folder, with its fu...

CVE-2026-13764

The Masterstudy - Education WordPress Theme theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.151. This is due to missing authorization and nonce validation on the masterstudymsstmsetdiscardtransient AJAX action. This makes it possible for...

CVE-2026-13764

The Masterstudy - Education WordPress Theme for WordPress (versions up to and including 4.8.151 ) is vulnerable to Privilege Escalation due to missing authorization and nonce validation on the masterstudy_ms_stm_set_discard_transient AJAX action. This flaw allows authenticated attackers with Subs...

CVE-2026-13764 Masterstudy - Education WordPress Theme <= 4.8.151 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation

The Masterstudy - Education WordPress Theme theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.151. This is due to missing authorization and nonce validation on the masterstudymsstmsetdiscardtransient AJAX action. This makes it possible for...

EUVD-2026-124350

The Masterstudy - Education WordPress Theme theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.151. This is due to missing authorization and nonce validation on the masterstudymsstmsetdiscardtransient AJAX action. This makes it possible for...

CVE-2023-26602

Exploit information for CVE-2023-26602 DISCLAIMER: For education, research, ethical hacking and professional pentesting ONLY...

WordPress Masterstudy - Education WordPress Theme theme <= 4.8.151 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation vulnerability

WordPress Masterstudy - Education WordPress Theme theme = 4.8.151 - Missing Authorization to Authenticated Subscriber+ Privilege Escalation vulnerability discovered by lhking in WordPress Theme Masterstudy versions = 4.8.151...