#1Cybersecurity research, materials, labs, and learning paths, including CTFs and curated educational resources.
Kitploit recommended

This repo contains my own Ducky/BadUSB scripts, related PowerShell scripts and other Flipper Zero related stuff.
eBook "Bypassing AVS by C#.NET Programming" (Free Chapters only)

Benchmark code and interactive results for autonomous network-attack detection by tool-using LLM agents investigating raw PCAPs.

Streamlit educational dashboard that simulates port scanning, DoS, brute force and data exfiltration attacks, with visualizations, attack logs and…

Research methods for reverse engineering encrypted firmware and software with AI-assisted analysis, independent validation, and public-source…

Jekyll-based pentesting knowledge base with methodology guides, cheatsheets, tool indexes, certification roadmaps, and curated practice lab and CTF…

Benchmark of 265 real vulnerability-introducing code changes across nine C, C++, and Rust projects, with paired review tasks, Docker sandbox, judge,…

A deep look at some recon methodologies and web-application vulnerabilities of my interest where I will merge all my notes gathered from books,…

About All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers

Deploy your own lab of web application penetration testing with docker and docker-compose, webgoat, dvwap, bwapp and Juice Shop

eLearnSecurity Junior Penetration Tester (eJPT) v2 Notes

Find the version that the project you currently develop or audit uses and quickly check which are the known smart contract security vulnerabilities…

OpenAI compaction research: GhostCompact + Compaction Smuggling

Educational module on internal network penetration testing: methodology, attack vectors, enumeration, exploitation, privilege escalation, and…

An automated Themida / Code Virtualizer / WinLicense (v3.0-v4) unpacker and dump fixer tool

Ubuntu vulnerability dataset publishing USN/LSN security notices in OSV and OpenVEX JSON formats for automated vulnerability and VEX-aware dependency…

C++ tool using libtins to craft and broadcast DHCP requests with random MACs across an IP pool, exhausting DHCP leases to demonstrate DHCP starvation…

PoC reproductions for security vulnerabilities in Godot Engine, published at disclosure