504 matches found
WebSecurityProject
WebSecurityProject ๅฏนCVE-2022-23988ๅCVE-2022-34265็ๅๆไธๅค็ฐ...
CVE-2022-25845-exploit
CVE-2022-25845-exploit ๅฐ่ฏ้่ฟ็ ็ฉถไปฅไธๆ็ซ ๆฅๅฉ็จๆญค CVE๏ผ https://jfrog.com/blog/cve-2022-25845-analyzing-the-fastjson-auto-type-bypass-rce-vulnerability/ https://www.freebuf.com/vuls/339752.html ไปฅไธๆฏๆ็ๅๆ๏ผ https://github.com/nerowander/CVE-2022-25845-exploit/blob/main/CVE-2022-25845.pdf...
CVE-2017-0541
CVE-2017-0541 ็ PoC ไธๆผๆดๅๆ...
cve-2014-4699-ptrace
ๅๆ https://duasynt.com/blog/cve-2014-4699-linux-kernel-ptrace-sysret-analysis...
awesome-list โ Updated!
Awesome Cybersecurity List My personal collection of awesome blog posts, write-ups, and papers focusing on cybersecurity. For a deeper dive into cybersecurity-related tools, check out the dedicated Cybersecurity Tools list. Outline 2026 2025 2024 2023 2022 2021 2020 2019 2018 2017 2016 2014 2011...
linux-privesc-linpeas
๐ง linux-privesc-linpeas End-to-end Linux privilege escalati...
cve-research
CVE Research Personal repository for CVE analysis, proof-of-c...
cybersec-mcp
๐ก๏ธ Cybersecurity Professor MCP Server Prof. Null โ Tu pro...
Towards Demystifying and Repairing LLM-In-The-Loop Vulnerabilities
Large Language ModelsLLMs have been actively integrated into modern software systems as critical components. LLM-in-the-loop vulnerabilities, where vulnerabilities are introduced by LLMs and their dependent downstream components, such as frameworks, introduce new risks. Although some benchmark...
Exploit for Improper Handling of Exceptional Conditions in Apache Struts
LAB 1 โ Apache Struts2 OGNL Injection CVE-2017-5638 / S2-045...
FuzzingBrain V2: A Multi-Agent LLM System for Automated Vulnerability Discovery and Reproduction
Software vulnerabilities pose critical security threats, with nearly 50,000 CVEs reported in 2025. While Large Language Models LLMs show promise for automated vulnerability detection, three key challenges remain. First, LLM-generated vulnerability reports suffer from high false positive rates and...
claude-skills-exploit
Security Research Skills Reusable skills for vulnerability an...
Exploit for SQL Injection in Progress Moveit_Cloud
CVE-2023-34362 MOVEit Transfer Vulnerability Analysis Proj...
cve-deep-dive
Report Bug ยท Request Feature Table of Contents a...
PatchChain-Multi-Agent-Agentic-Pipeline-for-Autonomous-Code-Vulnerability-Analysis
No d...
Exploit for Deserialization of Untrusted Data in Facebook React
๐ต๏ธ CVE-2025-55182 โ React Vulnerability Analysis Security...
patchbot
patchbot patchbot is an AI-assisted security reviewer for p...
Time-Domain Voice Identity Morphing (TD-VIM): A Signal-Level Approach to Morphing Attacks on Speaker Verification Systems
In biometric systems, it is a common practice to associate each sample or template with a specific individual. Nevertheless, recent studies have demonstrated the feasibility of generating "morphed" biometric samples capable of matching multiple identities. These morph attacks have been recognized...
METATRON AI Penetration Testing
Metatron is a CLI-based AI penetration testing assistant that runs entirely on your local machine - no cloud, no API keys, no subscriptions. You give it a target IP or domain. It runs real recon tools nmap, whois, whatweb, curl, dig, nikto, feeds all results to a locally running AI model, and the...
SkillAttack: Automated Red Teaming of Agent Skills through Attack Path Refinement
LLM-based agent systems increasingly rely on agent skills sourced from open registries to extend their capabilities, yet the openness of such ecosystems makes skills difficult to thoroughly vet. Existing attacks rely on injecting malicious instructions into skills, making them easily detectable b...