RFC-Security-Research

RFC-Security-Research Original paper and helper scripts to help analyse security aspects of Internet RFCs. Overview This repository hosts a review of RFC security written in the syle of an RFC, in addition to various python helper scripts that were used to obtain the data necessary for the...

readable-thrift

Readable Thrift Readable Thrift makes binary Thrift protocol messages easy to work with by converting them to and from a human-friendly format. This makes manual analysis of and tampering with binary format Thrift messages just as easy as working with plaintext protocols like HTTP. The library is...

CVE-2026-108433

A security feature bypass vulnerability exists in Microsoft Office Word due to the reliance on untrusted inputs in a security decision (CWE-807 ). This flaw allows an unauthorized attacker to bypass a security feature locally. The vulnerability has a HIGH base severity score of 7.8 , impacting co...

EUVD-2026-102445

Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally...

thingernet-graph

thingernet-graph Python script to generate neo4j Cypher representation of a collection of IoT devices for visualisation and query. The script reads a directory of JSON files describing 'things' and creates the relevant neo4j cypher text for import to neo4j in order to produce a graph database...

umap2

Umap2 Umap2 is the second revision of NCC Group's python based USB host security assessment tool. This revision will have all the features that were supported in the first revision: umap2emulate - USB device emulation umap2scan - USB host scanning for device support umap2detect - USB host OS...

PayloadAllTheThings

This repository does not have a README...

Writeups

Writeups Collection of detailed and optimized? write-ups for various CTF challenges. Challenge Name| Category| CTF Competition| Short Description ---|---|---|--- The wilderness| pwn| openECSC 2024| Breaking ASLR by timing memory access😈 Lua.efi| pwn| UIUCTF 2025| Booting an unsigned kernel using...

pasteguard-PoC

PasteGuard: security advisory CVE status: requested, pending assignment. This finding is published as GHSA-q94x-p9rc-q89f. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-pasteguard-PoC and this banner is replaced with the CVE link. | ---|--- Researcher| Dostxodjayev Abdullox...

AI_Security_Top

🛡️ AI-Security-Knowledge-Base This is a systematic AI security research project, covering a complete knowledge system from foundational machine learning algorithm theory to cutting-edge large model injection attacks, AI evasion countermeasures, and Deepfake. 🏗️ Knowledge System Architecture The...

code-graph-rag-PoC

code-graph-rag: security advisory CVE status: requested, pending assignment. This finding is published as GHSA-85gg-2gfq-q95m. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-code-graph-rag-PoC and this banner is replaced with the CVE link. | ---|--- Researcher| Dostxodjayev Abdullox...

ginger

Ginger Ginger is an open source security assessment tool that helps in assessing the security of a given Pentaho BA application instance. Please keep in mind that this project is still a work in progress, and not all features might be present or work as intended. Usage Ginger has only one mandato...

sweyntooth_bluetooth_low_energy_attacks

SweynTooth - Unleashing Mayhem over Bluetooth Low Energy This repository is part of a research outcome from theASSET Research Group. SweynTooth captures a family of 18 vulnerabilities across different Bluetooth Low Energy BLE software development kits SDKs of six major system-on-a-chip SoC vendor...

Exploit_Dev

ExploitDev Exploits, Exploits, Exploits and more Exploits!...

erica

Erica A neighbor for the GreatFET One targeting the 315/433/868/915MHz bands. This neighbour is not a design from GreatScottGadgets. So if it does not work, don't blame GSG but me. Name The arms of the plant erica remind me a bit to antennas. And that is what Erica shall be about. A neighbor with...

responsible-disclosure-email-gathering

Responsible Disclosure Email Gathering Purpose You may have found a vulnerability on a host but the said host/org does not have an active program on HackerOne or BugCrowd. If this is the case this workflow is for you! Broadly it will crawl the website and look for any security related emails from...

honeypot

🍯 Honeypot Research Project What is a Honeypot A honeypot is a computer system or network that is intentionally left vulnerable to hackers in order to detect, analyse, and respond to potential security threats. The goal of a honeypot is to gather information about the tactics, techniques, and...

local-llm-ctf

Local LLM CTF & Lab This repository is intended to be accompanied with the content at https://bishopfox.com/blog/large-language-models-llm-ctf-lab, which covers the goals of the research, explanations of the implementation, and a few results of the CTF...

internal-security-detect

Internal Security Detection via Safebase Exposed SafeBase portals serve two audiences at once: prospects who need proof of your security posture, and security researchers blue and red teamers. Each green tick reveals a control that supposedly exists today; every missing tick is an equally loud hi...

GHSA-23VG-4CJM-66Q5 kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion

Summary openapi3filter.ValidationHandler.Middleware validates requests with kin-openapi's legacy router, which selects an OpenAPI operation from the decoded URL.Path. The method is documented as implementing gorilla/mux.MiddlewareFunc, but a downstream gorilla/mux router configured with...