Learning & Education

defenders-guide/thedefendersguide

The Github project for The Defender's Guide by Luke Paine and Jonathan Johnson

ethan-andrews/exploitarium-detections

KQL detection rules for Microsoft Sentinel and Defender XDR covering the bikini/exploitarium anonymous disclosure — a personal research archive of…

fta2012/replicatedrandom

Java Random state replication tool that predicts future random values by recovering internal state from observed outputs, demonstrating weaknesses in…

aau-network-security/hostage

Low Interaction Mobile Honeypot

essexrich/threatactors-ttps

Repository created to share information about tactics, techniques and procedures used by threat actors. Initially with ransomware groups and evolving…

owasp/webgoat

This is a defunct code base. The project is located at: https://github.com/WebGoat

wioui/n8n-cve-2025-68613-exploit

CVE-2025-68613: n8n RCE vulnerability exploit and documentation

michalbednarski/thelastbundlemismatch

Writeup and exploit for CVE-2023-45777, bypass for Intent validation inside AccountManagerService on Android 13 despite "Lazy Bundle" mitigation

einaros/heartbleed-tools

OpenSSL Heartbleed (CVE-2014-0160) vulnerability scanner, data miner and RSA key-restore tools.

nccgroup/rftm

NCC Group Open Source RF Security Testing Methodology

raxe-ai/raxe-ce

Runtime protection for AI agents

0xtas/zenbuster

Multi-threaded URL enumeration/content-discovery tool in Python.

h21lab/tsharkvm

tshark + ELK analytics virtual machine

farazsth98/poc-cve-2025-38352

This is a proof of concept for CVE-2025-38352, a vulnerability in the Linux kernel's POSIX CPU timers implementation. The September 2025 Android…

al1ex/awesome-pentest

Collection of penetration testing tools

67-6f-64/antioreans-codedevirtualizer

IDA 6.8 plugin that devirtualizes Themida's FISH virtual machine (2.2.5.0-2.2.7.0), restoring native code from protected binaries for reverse…