Tools

l4st98/cve-2026-33017-fireflow

Proof-of-concept RCE for Langflow CVE-2026-33017 using a malicious custom component to execute OS commands via build_public_tmp and retrieve output…

alzeaty1/security-writeups

CTF writeups and teaching scripts for web security, bug bounty techniques, and network forensics, with blank-value versions for active practice.

pugazhendii22/keepass-exfil-forensics

Network forensics writeup + tooling for a TryHackMe DFIR challenge: reverses a hex→Base64→XOR exfiltration chain from PCAP traffic, then recovers a…

prapul1/vulnhub-dc1-writeup

VulnHub DC-1 boot-to-root — exploiting CVE-2018-7600 (Drupalgeddon2) for RCE, extracting DB credentials from settings.php, forging admin password…

the-viper-one/pentest-everything

A collection of CTF write-ups, pentesting topics, guides and notes. Notes compiled from multiple sources and my own lab research. Topics also support…

nick0ve/how-to-bypass-aslr-on-linux-x86_64

ASLR bypass without infoleak

al1ex/awesome-pentest

Collection of penetration testing tools

anxs3c/twomillion-machine-writeup

From deobfuscating code.js to root, CVE-2023-0386

nyu-llm-ctf/ctftiny

Official repository for CTFTiny

sunblaze-ucb/exploitgym

ExploitGym is a large-scale, realistic benchmark built from real-world vulnerabilities designed to evaluate AI agents' ability to develop exploits.

fernandocassiodev/cve-2015-1328

Step-by-step walkthrough for exploiting CVE-2015-1328 (OverlayFS) to escalate privileges from a low-privileged user to root on Ubuntu 14.04. Includes…

star-sg/obo

Slides from Off-By-One Conferences

horkimhab/cve-2026-50522

CVE-2026-50522 - Draft

pduggusa/dugganusa-ietf

DugganUSA threat-intelligence contributions to the IETF Hackathon — real-world agentic-attack benchmark vectors, CVE-2026-33697 attestation analysis,…

trailofbits/publications

Publications from Trail of Bits