429 matches found
awesome-search-queries
Awesome Search Queries Community curated list of search queries for various categories across multiple search engines. Welcome to Awesome Search Queries, a community-driven project to create an index of search queries for various categories across multiple search engines. This project is inspired...
offensive-onos
Offensive ONOS My experiments in weaponizing ONOS applications. This is a part of research activity for my Cybersecurity M.Sc. Thesis link, focused on detection of Cross App Poisoning Attacks in Software Defined Networks. This research also led to discovery ofCVE-2023-24279 and CVE-2023-30093...
CVEs
CVEs This repository contains publicly disclosed vulnerabilities reported during my security research activities. Notes The repository may include: Technical write-ups Vulnerability details References Security analyses Additional research related to published disclosures Research Interests...
AppSecEzine
AppSec Ezine Raising awareness towards the prevention of security risks is challenging. Most people are unaware of or just don’t have access to the right information. Keeping up the pace in the tech world is a golden rule. If you are not ready to deal with security issues, you are heading in the...
ghidra-scripts
ghidra-scripts "Humans are more suited to recognize food than to keep large graphs in their head." -- Halvar Flake A collection of my Ghidra scripts to facilitate reverse engineering and vulnerability research. Blog post...
frinet
Frinet By combining Frida with an enhanced version of Tenet, Frinet facilitates the study of large programs, vulnerability research and root-cause analysis on iOS, Android, Linux, Windows, and most architectures. Blogpost on the Synacktiv website This version is a complete rewrite of...
notes
notes An archive of my vulnerability research notes. Mostly, expanded takes from Twitter...
ronin
ronin Website Source Issues Documentation Discord | Mastodon Description Roninwebsite is a free and Open Source Ruby toolkit for security research and development. Ronin contains many different CLI commands and Ruby librariesronin-rb for a variety of security tasks, such as encoding/decoding data...
Anthropic-Credited-CVEs
ANTHROPIC CVE TRACKER Overview Tracking vulnerabilities that credit the Anthropic research team and are possibly discovered by Project Glasswing. CURRENT CVE COUNT: 301 Fixed Anthropic Findings w/o CVE: 128 Findings Withdrawn by Anthropic: 243 Distributions | ---|--- Anthropic Research Tracking...
http-garden
The HTTP Garden The HTTP Garden is a collection of HTTP servers and proxies configured to be composable, along with scripts to interact with them in a way that makes finding vulnerabilities much much easier. For some cool demos of the vulnerabilities that you can find with the HTTP Garden, check...
vulnerability-research
This repository does not have a README...
DeepZero
Automated vulnerability research pipeline engine Define pipelines as YAML. DeepZero handles orchestration, parallelism, fault tolerance, and state. English | 简体中文 | Français 🔗 Pipeline-as-YAML - chain ingest, filter, transform, and LLM-assess stages declaratively ⚡ Parallel execution -...
disclosures
Cylance Vulnerability Research - Disclosure Repository This is a repository to hold all of Cylance's Vulnerability Research team's public vulnerability disclosures. The public key for our Vulnerability Research Team e-mail is below: -----BEGIN PGP PUBLIC KEY BLOCK-----...
VulnFanatic-NG
VulnFanatic-NG LLM-assisted vulnerability research for Binary Ninja. VulnFanatic-NG adds a sidebar panel that scans the current binary and asks an LLM — a locally hosted OpenAI-compatible model by default, or Anthropic Claude, Google Gemini, or Azure OpenAI see LLM backends — to judge whether...
semgrep-rules
semgrep-नियम "हमला सतह ही कमजोरी है। वहाँ बग ढूंढना सिर्फ एक विस्तार है।" -- Mark Dowd "कुछ विवरण दूसरों से अधिक महत्वपूर्ण हैं।" -- Fedor G. Pikus मेरे Semgrep नियमों का एक संग्रह जो कमजोरी अनुसंधान को सुविधाजनक बनाता है। ब्लॉग पोस्ट...
XPL-SEARCH
XPL SEARCH Search exploits/vulnerabilities in multiple databases online! XPL SEARCH is a multiplatform toolWindows and Linux, which was developed in PHP with the aim of helping the hacker community to find exploits or 'vulnerabilities', using online databases, below is the list of databases which...
cve-2024-11477-writeup
CVE-2024-11477 Writeup This is a writeup of my research on CVE-2024-11477. Keep in mind this may have errors and will not be perfect, as this was a pretty quick analysis. Please let me know if you disagree with anything! See the other Markdown file for the information on the different files...
VivisectION
VivisectION: مجموعة أدوات الهندسة العكسية المدفوعة بالمحاكاة VivisectION هي نقطة التقاء الهندسة العكسية عبر الواجهة الرسومية، والمحاكاة، والتنقيح، مع التركيز على استخدام المحاكاة وأدوات Vivisect القوية الأخرى للمساعدة في الهندسة العكسية وأبحاث الثغرات. من بين أمور أخرى، تُعد VivisectION المعروفة...
CVE-2025-46811-challenge
CVE-2025-46811 Challenge A security challenge environment for CVE-2025-46811 vulnerability research. Prerequisites Control Node Ansible Host Install the following system packages: apt install python311 python311-pip sshpass rsync Install Ansible via pip: pip install ansible==12.3.0 Target VM The...