#1
mithileshan/soc-investigation-labEnd-to-end SOC investigation: CVE-2011-2523 kill chain, multi-source log correlation, incident report — MITRE ATT&CK T1190
xnl-h4ck3r/xnlrevealA Chrome/Firefox browser extension to show alerts for reflected query params, show Wayback archive links for the current path, show hidden elements…
praetorian-inc/gatoGitHub Actions Pipeline Enumeration and Attack Tool
certtools/intelmqIntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
francesco-cyberintelligence/bug-bounty-findings-o-research-disclosures.Bug Bounty: CVE-2023-50839 IDOR identified in a third-party support component via 'gau' and 'Nuclei'. Despite perimeter redirects, the outdated…
karimelsheikh1/htb-pterodactyl-writeupHTB Season 10 - Pterodactyl machine writeup. Medium Linux box covering CVE-2025-49132 (Pterodactyl Panel RCE) and CVE-2025-6018/6019 (udisks2…
cloudflare/exim-cve-2019-10149-dataCurated dataset of IPs, ASNs, and SMTP banners for Exim CVE-2019-10149, with linked advisories and threat actor intelligence for vulnerability…
yacine-rm/cve-2025-5880-pocProof-of-concept exploit for an unauthenticated path traversal vulnerability in Whistle v2.9.98.
medbenali/cyberscanOpen-source network forensics toolkit for packet analysis, port scanning, host discovery, and IP geolocation. Supports ARP, ICMP, TCP, UDP pings and…
karimelsheikh1/htb-twomillion-writeupHackTheBox TwoMillion machine writeup — API abuse, command injection & CVE-2023-0386
w41l3r/jenkins_scanFind jenkins environment and checks for CVE-2024-23897
alexanderortizscript/evillcodeHerramienta de auditoría y análisis de redes para Kali Linux.
openai/privacy-filterBidirectional token-classification model for PII detection and masking in text, with CLI for redaction, evaluation, and finetuning on-premises.
d4rkmatt3r/kyoceracredsdumpKyocera cred dumper based on CVE-2022-1026
tjoulel/wordpress-6.9.1-blind-ssrfBased on CVE-2022-3590, WordPress <= 6.9.1 - Unauthenticated Blind SSRF via XML-RPC Pingback Discovery proof of concept (PoC)
twappz/htb-silentium-writeupHack The Box - Silentium machine writeup | CVE-2025-58434, CVE-2025-59528, CVE-2025-8110
nu1l0/cve-2024-46636-sqli-modapsSQL Injection vulnerability in NASA EOSDIS MODAPS due to improper input validation in the `category` parameter. This flaw allows attackers to…
