gitlab-da/tutorials/security-and-governance/custom-scanner-integration/fern-pattern-scannerScans selected files for patterns stated in rules. This is used in order to find secrets you may have accidentally written to a file. This scanner is…
rootkited/graylog-cve-2024-24824-exploitProof-of-concept exploit for CVE-2024-24824 demonstrating how an arbitrary class loading primitive can be transformed into remote code execution on…
rat5ak/cve-2025-55182-react2shell-rce-pocThis repository documents research into deserialization behavior within Next.js React Server Components (RSC) using the Flight protocol. It focuses…
themalwareguardian/cve-2025-70330Easy Grade Pro 4.1 file parsing bug used as an educational example to show how beginners can start vulnerability research through reverse engineering.
phusion/rails-cve-2012-5664-testDemo app showing how the Rails CVE-2013-5664 vulnerability works.
lycis/cawdogCAWODOG is a proof-of-concept project demonstrating how to protect Python-based AI models deployed on offline industrial machines. Across three…
chilit-nl/log4shell-exampleThe goal of this project is to demonstrate the log4j cve-2021-44228 exploit vulnerability in a spring-boot setup, and to show how to fix it.
otaviokr/log4j-2021-vulnerability-studyThis is a showcase how the Log4J vulnerability (CVE-2021-44228) could be explored. This code is safe to run, but understand what it does and how it…
google/osv-scannerVulnerability scanner written in Go which uses the data provided by https://osv.dev
patriksimek/vm2Isolated JavaScript sandbox for Node.js that runs untrusted code with restricted access to built-in modules and host resources via Proxy-based…
manuelschipper/naha guard that blocks catastrophic agent actions
agent-field/sec-afAI-native code security auditor on AgentField that proves exploitability with verdicts, traces, and actionable evidence.
c53elyas/cve-2023-33733Detailed technical write-up and proof-of-concept exploit for CVE-2023-33733, a remote code execution vulnerability in the Reportlab Python library…
rog3rsm1th/frelatageCoverage-based fuzzer for python applications
lunixbochs/revsyncrealtime cross-tool collaborative reverse engineering
sunnypatell/basaltWorld's first hazard checker for NVIDIA Blackwell (sm_120), with an assembler and scheduler matched against their own compiler byte for byte. The…
nccgroup/lightweight_static_analysisCreate useful, lightweight static analyses using open source tools + a tiny bit of your code
boroeurnprach/cve-2026-23947-pocProof-of-concept demonstrating arbitrary code execution in Orval via malicious OpenAPI fields, with setup, exploit steps, and remediation guidance.
