CVE

Proof-of-Concept Exploits Repository This repository contains my own collection of proof-of-concept PoC exploits created for security testing and research purposes. Each folder is organized by CVE identifier for example: CVE-2025-XXXX/, and inside you will find the corresponding exploit code and...

sqlancer

SQLancer is a tool to automatically test Database Management Systems DBMSs in order to find bugs in their implementation. That is, it finds bugs in the code of the DBMS implementation, rather than in queries written by the user. SQLancer has found hundreds of bugs in mature and widely-known DBMSs...

bitcoder-v2-research

BitCoder-v2 Research Organization: Bytepro AI Status: Active research — private repository Target: arXiv Q3 2026 + ARC Prize Paper Track Nov 2026 Research Objective Empirically document that the single-prompt ceiling observed in mathematical reasoning SAIR, arXiv:2504.18897 replicates in code...

CTF-Write-ups

CTF-Write-ups Some CTF Write-ups Follow us on...

IoT-Implant-Toolkit

IoT-Implant-Toolkit IoT-Implant-Toolkit es un framework de herramientas útiles para la investigación de implantación de malware en dispositivos IoT. Es un conjunto de herramientas compuesto por software esencial para la modificación de firmware, depuración de puertos serie, análisis de software y...

gftrace

gftrace A command line Windows API tracing tool for Golang binaries. Note: This tool is a PoC and a work-in-progress prototype so please treat it as such. Feedbacks are always welcome! How it works? Although Golang programs contains a lot of nuances regarding the way they are built and their...

CVEs

CVEs This repository contains publicly disclosed vulnerabilities reported during my security research activities. Notes The repository may include: Technical write-ups Vulnerability details References Security analyses Additional research related to published disclosures Research Interests...

threatresearch

threatresearch I wanted to call this repo "Nuclear Football Codes". I was outvoted...

tplmap

Tplmap This project is no longer maintained. I'm happy to merge new PRs as long they don't break the test suite. Tplmap assists the exploitation of Code Injection and Server-Side Template Injection vulnerabilities with a number of sandbox escape techniques to get access to the underlying operatin...

ShonyDanza

ShonyDanza Una herramienta personalizable y fácil de navegar para investigar, hacer pruebas de penetración y defender con el poder de Shodan. Con ShonyDanza, puedes: Obtener IPs según criterios de búsqueda Excluir automáticamente honeypots de los resultados según tus umbrales preconfigurados...

GhostESP

The ESP-IDF-native wireless security platform for ESP32. Deep Wi-Fi and BLE assessment, research-grade capture and export, and a real app ecosystem. Built directly on Espressif's ESP-IDF rather than through the Arduino core, so new silicon and radio features land first and there is no abstraction...

CVE-2025-1661

CVE-2025-1661 Exploit for CVE-2025-1661 - HUSKY – Products Filter Professional for WooCommerce 1.3.6.6 PoC is now published. It was created for educational/research purposes only! Use it at your own risk!...

hetty

Hetty es un kit de herramientas HTTP para investigación en seguridad. Su objetivo es convertirse en una alternativa de código abierto a software comercial como Burp Suite Pro, con potentes funcionalidades adaptadas a las necesidades de la comunidad de infosec y bug bounty. Características Proxy...

hetty

Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community. Features Machine-in-the-middle MITM HTTP proxy, with logs and advanced...

research-labs

Researcher's labs This repository contains a number of intentionally vulnerable applications that you can use to explore vulnerabilities found by PortSwigger Research. Note that you can find many free online labs designed by PortSwigger Research in the Web Security Academy. Table of contents...

CVE-2024-2876

CVE-2024-2876 POC for SQLi vulnerability in Icegram express Legal Disclaimer The Proof of Concept PoC script provided in this repository serves solely for educational and research objectives. Its purpose is to showcase a specific vulnerability and aid in comprehending associated security risks. A...

tldfinder

TLDFinder Features • Installation • Usage • Running tldfinder • Join Discord A streamlined tool for discovering private TLDs for security research. Features TLD based DNS lookups Passive TLD based DNS lookups Active STD IN/OUT and TXT/JSON output Installation tldfinder requires Go 1.21 to install...

OpenCLAW-P2P

P2PCLAW - Colectivo de Investigación Autónomo Descentralizado P2PCLAW es una red de investigación descentralizada donde agentes de IA e investigadores humanos publican, validan, preservan y evalúan trabajo científico a través de una infraestructura abierta. Último artículo público:...

CVE-research

CVE-research A repository that contains all the working PoC I have crafted for known CVEs, and details on any ongoing research I am currently doing mostly Iot devices Note on working PoC exploit scripts/payloads 1. Use the exploit scripts ethically and responsibly! I will not be responsible for a...

Gideon

root@kitploit: ██████╗ ██╗██████╗ ███████╗ ██████╗ ███╗ ██╗ ██╔════╝ ██║██╔══██╗██╔════╝██╔═══██╗████╗ ██║ ██║ ███╗██║██║ ██║█████╗ ██║ ██║██╔██╗ ██║ ██║ ██║██║██║ ██║██╔══╝ ██║ ██║██║╚██╗██║ ╚██████╔╝██║██████╔╝███████╗╚██████╔╝██║ ╚████║ ╚═════╝ ╚═╝╚═════╝ ╚══════╝ ╚═════╝ ╚═╝ ╚═══╝ Agente...