CVE-2026-20223

CVE-2026-20223 ⚠️ Security Research & Legal Disclaimer 📌 Purpose of This Repository This repository is provided strictly for educational, academic, and authorized cybersecurity research purposes only. It is intended to support understanding of: Security vulnerabilities and exploitation concepts in...

ObfuXtreme

If you find this GitHub repo useful, please consider giving it a star! ⭐ ⚡ ObfuXtreme — Advanced Python Obfuscation Engine ObfuXtreme is an advanced Python obfuscation engine focused on structural obfuscation , AST-level transformations , and runtime payload protection. It is designed for securit...

SpringBootVulExploit

Spring Boot Vulnerability Exploit Check List Collection of Spring Boot related vulnerability learning materials, exploitation methods and techniques, black-box security assessment check list Statement ⚠️ All content in this project is only for security research and authorized testing. Those who...

CVE-2025-57819

Usage python3 exploit.py Legal Warning !WARNING This software is intended for educational and authorized security research purposes only. Unauthorized use on any system is illegal and strictly prohibited. The author, kali , is not responsible for any damage or misuse of this framework...

awesome-web-hacking

awesome-web-hacking This list is for anyone wishing to learn about web application security but do not have a starting point. You can help by sending Pull Requests to add more information. If you're not inclined to make PRs you can tweet me at @infoslack Table of Contents Books Documentation Tool...

semgrep-rules

semgrep-rules de elttam Bienvenido al repositorio público de reglas semgrep...

CVE-2026-9082

⚠️ Security Research & Legal Disclaimer 📌 Purpose of This Repository This repository is provided strictly for educational, academic, and authorized cybersecurity research purposes only. It is intended to support understanding of: Security vulnerabilities and exploitation concepts in controlled...

tldfinder

TLDFinder Características • Instalación • Uso • Ejecutar tldfinder • Únete a Discord Una herramienta optimizada para descubrir TLD privados para la investigación de seguridad. Características Búsquedas DNS basadas en TLD Pasivas Búsquedas DNS basadas en TLD Activas Salida estándar IN/OUT y TXT/JS...

cve

CVE PoC Almost every publicly available CVE PoC. Current hottest CVEs Title| URL ---|--- CVE-2022-0001| /trickest/cve/blob/main/2022/CVE-2022-0001.md CVE-2022-25297| /trickest/cve/blob/main/2022/CVE-2022-25297.md CVE-2022-1388| /trickest/cve/blob/main/2022/CVE-2022-1388.md CVE-2022-25451|...

L0p4Map

L0p4Map Nmap was blind. L0p4Map sees. Professional network monitoring & visualization tool built for security researchers. https://github.com/user-attachments/assets/745eb888-0636-47e8-9293-38a706a8e897 What is L0p4Map? L0p4Map is a professional grade network monitoring tool that combines the pow...

securitylab

GitHub Security Lab Este es el repositorio git principal de GitHub Security Lab. Lo utilizamos para estos propósitos principales: Compartimos con nuestra comunidad algunas buenas prácticas sobre investigación de seguridad y divulgación de vulnerabilidades en nuestros docs Usamos issues en este...

CVE-2024-2876

CVE-2024-2876 POC for SQLi vulnerability in Icegram express Legal Disclaimer The Proof of Concept PoC script provided in this repository serves solely for educational and research objectives. Its purpose is to showcase a specific vulnerability and aid in comprehending associated security risks. A...

metarget

中文 | English 1 Introduction Metarget = meta- + target, a framework providing automatic constructions of vulnerable infrastructures, used to deploy simple or complicated vulnerable cloud native targets swiftly and automatically. 1.1 Why Metarget? During security researches, we might find that the...

HowToHunt

HowToHunt A collection of practical guides, methodologies, and resources for hunting vulnerabilities From Hackers for Community, because Hacking is not just a skill It’s a Mindset 💡 What is HowToHunt? HowToHunt is a collaborative repository of step-by-step guides, methodologies, and hands-on...

TLS-Scanner

TLS-Scanner TLS-Scanner is a tool to assist pentesters and security researchers in the evaluation of TLS server and client configurations. Please note: TLS-Scanner is a research tool intended for TLS developers, pentesters, administrators and researchers. There is no GUI. It is in the first versi...

linux-kernel-exploitation

Explotación del Kernel de Linux Una colección de enlaces relacionados con la seguridad y explotación del kernel de Linux. Actualizado bimestralmente. También se aceptan solicitudes de extracción. Sigue a @andreyknvl en X, @[email protected] en Mastodon, o @andreyknvl en Bluesky para recibir...

defending-code-reference-harness

Defending Code Reference Harness A reference implementation for autonomous vulnerability discovery and remediation with Claude, based on our learnings from partnering with security teams at several organizations since launching Claude Mythos Preview. For a write up of these learnings along with...

hetty

Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community. Features Machine-in-the-middle MITM HTTP proxy, with logs and advanced...

Clutch

Clutch Clutch es una herramienta de descifrado de iOS de alta velocidad. Clutch es compatible con iPhone, iPod Touch y iPad, así como con todas las versiones de iOS, tipos de arquitectura y la mayoría de binarios. Clutch está destinado únicamente a fines educativos y de investigación en seguridad...

uncaptcha

uncaptcha Defeating Google's audio reCaptcha system with 85% accuracy. Disclaimer unCaptcha is intended to be a proof of concept. As of the time of our paper, we found it to successfully solve reCaptcha's audio challenges with 85% success. Since that time, reCaptcha appears to include some...