bug-bounty-library

Bug Bounty / Original Findings Library Folders are numbered in the order a hunter actually works - first to last. Start at 00-hunt/00-INDEX. Run the hunt from 00-hunt/ALPHA. This README is only the map. Authorization only. Safe harbor, VDP, GitHub PVR, or coordinated disclosure. No other-customer...

ronin

ronin Website Source Issues Documentation Discord | Mastodon Description Roninwebsite is a free and Open Source Ruby toolkit for security research and development. Ronin contains many different CLI commands and Ruby librariesronin-rb for a variety of security tasks, such as encoding/decoding data...

awesome-search-queries

Awesome Search Queries Community curated list of search queries for various categories across multiple search engines. Welcome to Awesome Search Queries, a community-driven project to create an index of search queries for various categories across multiple search engines. This project is inspired...

DeepZero

Automated vulnerability research pipeline engine Define pipelines as YAML. DeepZero handles orchestration, parallelism, fault tolerance, and state. English | 简体中文 | Français 🔗 Pipeline-as-YAML - chain ingest, filter, transform, and LLM-assess stages declaratively ⚡ Parallel execution -...

frinet

Frinet By combining Frida with an enhanced version of Tenet, Frinet facilitates the study of large programs, vulnerability research and root-cause analysis on iOS, Android, Linux, Windows, and most architectures. Blogpost on the Synacktiv website This version is a complete rewrite of...

Glassfish-research

GlassFish Security Research Vulnerability research on the Eclipse GlassFish administration console. CVE| Issue| Severity| Status ---|---|---|--- CVE-2026-2586| EL injection → RCE| 9.1 Critical| Fixed in 8.0.2 —| —| —| Pending disclosure CVE-2026-2586 — EL Injection to RCE Affected: 8.0.2 · CWE-91...

maritime-security-paper

Maritime Security Research Paper Comprehensive research on security vulnerabilities in autonomous maritime vessels and defense recommendations 📄 Overview This repository contains the complete maritime security research paper, documentation, and supplementary materials for academic publication and...

Spring-CVE-2022-22947-

This repository does not have a README...

vsftpd-cve-2011-2523-detection-signature

Detection Engineering & Vulnerability Research - CVE-2011-2523 vsftpd 2.3.4 A CVE to Detection Signature Engineering Project: researching a disclosed vulnerability, building a fingerprint that identifies it externally, and validating detection quality against real lab targets. !Vulnerability...

http-garden

The HTTP Garden The HTTP Garden is a collection of HTTP servers and proxies configured to be composable, along with scripts to interact with them in a way that makes finding vulnerabilities much much easier. For some cool demos of the vulnerabilities that you can find with the HTTP Garden, check...

semgrep-rules

Trail of Bits public Semgrep rules This repository contains Semgrep rules developed by Trail of Bits and made available to the public. They are part of our ongoing development efforts and are used in our security audits, vulnerability reseach, and internal projects. They will evolve over time as ...

JCEzploit-CVE-2026-48907

JCEzploit Joomla JCE Security Testing Framework A professional command-line utility for authorized penetration testing, controlled vulnerability research, and defensive validation. Authorized use only. Run this project exclusively against systems you own or are explicitly permitted to test. Use a...

security-portfolio-chris-peterson

security-portfolio-chris-peterson My portfolio showcasing vulnerability research CVE-2026-11989, CVE-2026-11395 and automated threat orchestration engineering Lucius Engine, TalonVigil...

cve-2024-11477-writeup

CVE-2024-11477 Writeup This is a writeup of my research on CVE-2024-11477. Keep in mind this may have errors and will not be perfect, as this was a pretty quick analysis. Please let me know if you disagree with anything! See the other Markdown file for the information on the different files...

Heptagram

Heptagram This project is used to collect the EXP/POC disclosed on the Internet and provide project support for Heptagram security team...

AppSecEzine

AppSec Ezine Raising awareness towards the prevention of security risks is challenging. Most people are unaware of or just don’t have access to the right information. Keeping up the pace in the tech world is a golden rule. If you are not ready to deal with security issues, you are heading in the...

Vulnerability-Research

🛡️ Vulnerability Research Here, I catalog the vulnerabilities I've discovered, the corresponding write-ups containing details of the weaknesses, and insights into their impact and remediation. 🏆 Assigned CVEs CVE ID| Vulnerability Title| Severity/CVSS| Published| Write-Up ---|---|---|---|--- N.A.|...

vulnerability-research

This repository does not have a README...

Anthropic-Credited-CVEs

ANTHROPIC CVE TRACKER Overview Tracking vulnerabilities that credit the Anthropic research team and are possibly discovered by Project Glasswing. CURRENT CVE COUNT: 318 Fixed Anthropic Findings w/o CVE: 128 Findings Withdrawn by Anthropic: 243 Distributions | ---|--- Anthropic Research Tracking...

ghidra-scripts

ghidra-scripts "Humans are more suited to recognize food than to keep large graphs in their head." -- Halvar Flake A collection of my Ghidra scripts to facilitate reverse engineering and vulnerability research. Blog post...