#1Security papers, research projects, technical references, and reproducible material for defensive or authorized analysis.
Kitploit recommended
metnew/write-upsCurated collection of technical write-ups detailing RCE vulnerabilities in GitHub Desktop, GitHub CLI, and Claude Code, with CVE references and…
google/kernel-researchLinux kernel exploitation toolkit providing an exploit-building library, ROP chain and stack pivot generators, kernel image runners, and a target…
cookiengineer/actual-php2shell:robot: NO, There is an easy way to exploit this vulnerability! (vibecoded to prove a point)
atredispartners/advisoriesCollection of Atredis Partners security advisories documenting vulnerabilities discovered during client engagements and independent research, with…
g4sp4rcs/cve-2026-42980-pocPublic exploit and research material for CVE-2026-42980, a Windows kernel WMI integer-underflow vulnerability enabling local privilege escalation to…
wheregoes/byd-dolphin-hackingReverse engineering the BYD Dolphin head unit — CAN bus, AVAS, NFC keys, OTA, and more. DiLink 3 / Android 10.
denuvosoftwaresolutions/simbaEfficient Deobfuscation of Linear Mixed Boolean-Arithmetic Expressions
zju-llm-safety/darwinEvolutionary LLM jailbreak and guardrail framework that grows a reusable strategy pool via genetic mutation, Markov selection, and online adversarial…
kuleuven-cosic/whisperpairThe official reference implementation & vulnerability verification of our attack WhisperPair (CVE-2025-36911) which affects Google's Fast Pair…
canyie/cve-2024-0044Proof-of-concept and writeup for bypassing the initial patch of CVE-2024-0044, an Android framework vulnerability enabling privilege escalation from…
darkarnium/secpubPublished security vulnerabilities, research, and associated information.
cfandr-github/php-binary-bugsPHP binary bugs advisory
facebook/mcpguard-dynamicKernel-level eBPF sandbox for securing LLM agent tool calls made through the Model Context Protocol (MCP)
alphaseclab/all-my-collection-reposAll Security Resource Collections Repos That I Published.
iaga-team/iaga-sentinelCryptographically signed, replay-verifiable evidence layer for AI agents. Governs actions in the loop, produces Ed25519-signed receipts linked into a…
dougwithseismic/dezlock-dumpRuntime schema + RTTI extraction tool for Deadlock, CS2, Dota, and others (Source 2). No source2gen required.
colmmacc/cve-2022-3602Technical deep-dive and anti-POC for CVE-2022-3602, a punycode buffer overflow in OpenSSL 3.0.x, with reproduction scripts, stack analysis, and…
