awesome-ai-security
gmh5225/awesome-ai-securityA curated list of AI Security materials and resources for Pentesters, Bug Hunters, and Security Researchers.
adversarial-attackai-securityctf+7
60
gmh5225/awesome-ai-securityA curated list of AI Security materials and resources for Pentesters, Bug Hunters, and Security Researchers.
misp/misp-galaxyClusters and elements to attach to MISP events or attributes (like threat actors)
adityabhatt3010/cve-2025-54794-hijacking-claude-ai-with-a-prompt-injection-the-jailbreak-that-talked-backA high-severity prompt injection flaw in Claude AI proves that even the smartest language models can be turned into weapons — all with a few lines of…
marcnewlin/hi_my_name_is_keyboardBluetooth keystroke injection exploit PoCs for CVE-2023-45866, CVE-2024-21306, and CVE-2024-0230 targeting Android, Linux, macOS, and iOS via…
george0papasotiriou/llm-jailbreak-via-chain-of-logic-injection-cve-2026-3098Multi-stage prompt injection technique that bypasses LLM safety alignment via identity reassignment, refusal suppression, and output coercion,…
george0papasotiriou/cve-2026-5556-kubernetes-admission-controller-bypass-via-case-sensitivityExploit PoC and vulnerable admission webhook for CVE-2026-5556, demonstrating Kubernetes admission controller bypass via case-sensitive pod name…
joertx07/printnightmare-detection-labSplunk SIEM lab simulating and detecting CVE-2021-34527 (PrintNightmare) exploitation using Sysmon, Windows Event logs, and custom SPL detection…
imabee101/cve-2023-44487PoC script for HTTP/2 Rapid Reset (CVE-2023-44487) that sends crafted HTTP/2 streams to trigger denial-of-service conditions on vulnerable servers,…
george0papasotiriou/cve-2026-21016-malicious-pypi-package-install-hook-setup.py-execution-Demonstrates how a malicious Python package executes arbitrary commands during pip install via setup.py, highlighting PyPI supply chain and…
masasron/copyescape-cve-2026-17106PoC repository for the blog post CopyEscape: Taking Over Docker Hosts with docker cp
george0papasotiriou/cve-2026-21010-voip-sip-digest-authentication-replayPython PoC for CVE-2026-21010 that replays captured SIP digest Authorization headers to bypass nonce uniqueness/expiration and make unauthorized VoIP…
george0papasotiriou/cve-2026-22016-ipfs-cid-spoofing-via-multihash-length-extensionPython proof-of-concept demonstrating IPFS CID spoofing via multihash length extension, highlighting content-addressing verification flaws that can…
george0papasotiriou/cve-2026-2828-webgpu-cross-origin-pixel-stealing-via-timingBrowser PoC demonstrating CVE-2026-2828, a WebGPU timing side-channel that leaks cross-origin iframe pixel values by measuring GPU timestamp-query…
686f6c61/poc-copyescape-cve-2026-17106PoC funcional de CVE-2026-17106 (CopyEscape): carrera TOCTOU en docker cp que permite escritura arbitraria en el host Docker. Laboratorio Docker +…
lxxexxbxx/cve-2026-44578Proof-of-concept exploit for CVE-2026-44578 that reproduces the vulnerable condition, enabling security researchers to validate affected systems and…
ezramansor/cve-2025-32432-pocA simple PoC on the Remote Code Execution (RCE) Vulnerability of CraftCMS designated as CVE-2025-32432 written in Go
cerberusmrxi/cve-2023-44487-http2-dos-rapid-reset-exploitAdvanced CVE-2023-44487 HTTP/2 Rapid Reset vulnerability exploitation framework. Features multi-connection concurrent attacks, adaptive rate control,…
george0papasotiriou/cve-2026-7070-rdp-clipboard-hijacking-via-virtual-channel-injectionCVE-2026-7070 PoC for RDP clipboard hijacking via virtual channel injection; includes simulated server and exploit script for data theft/credential…