hacker-profile
noraj/hacker-profilePersonal hacker profile page showcasing CTF achievements, cybersecurity projects, and curated resources. Built with Middleman and Gulp for static…
ctfcurated-resourceseducation
noraj/hacker-profilePersonal hacker profile page showcasing CTF achievements, cybersecurity projects, and curated resources. Built with Middleman and Gulp for static…
jwsly12/cve-2025-66034-htb-ctfExploit for VariaType HTB machine leveraging XML injection in fontTools to achieve RCE via PHP reverse shell payload in .designspace metadata.
jwsly12/cve-2025-58434-59528-htb-ctfExploitation Silentium HTB-CTF
dontpanico/jwtxploiterAutomated JWT security testing tool that exploits known CVEs, tampers with payloads, performs JKU/X5U injection, key confusion attacks, and verifies…
9carlo6/cve-2024-23346This repository contains a Crystallographic Information File (CIF) intended for use on the "Chemistry" machine on Hack The Box (HTB).
byt3quester/cve-2023-20938-pocLocal privilege escalation proof-of-concept for CVE-2023-20938, a use-after-free in Android binder, achieving root and disabling SELinux on…
screetsec/brutesploitBruteSploit is a collection of method for automated Generate, Bruteforce and Manipulation wordlist with interactive shell. That can be used during a…
yusufdalbudak/cve-2026-42945Dockerized lab for training on NGINX rewrite vulnerability (CVE-2026-42945) with vulnerable and patched instances, benign test scripts, and…
momenbasel/htb-writeupsStructured collection of 500+ Hack The Box machine writeups, 400+ challenge solutions, and interactive learning tools including knowledge graphs,…
taktak0x/htb-nanocorp-cve-2024-0670PowerShell exploit for CVE-2024-0670 that abuses CheckMK Agent MSI repair to escalate privileges to SYSTEM on the NanoCorp Hack The Box machine.
taniungou/php2shell-labBlack-box pentest lab for the PHP2Shell engine memory-corruption family (CVE-2026-109618 / CVE-2026-109619, CVSS 9.8/9.2). Dual-flag verified attack…
jwsly12/cve-2022-46364-htb-ctfExploit CVE-2022-46364 in Apache CXF 3.2.14 for LFI and SSRF via MTOM/XOP injection. Automated multipart construction and Base64 extraction for HTB…
tani2shell/php2shell-labBlack-box pentest lab for the PHP2Shell engine memory-corruption family (CVE-2026-109618 / CVE-2026-109619, CVSS 9.8/9.2). Dual-flag verified attack…
sleventyeleven/linuxprivcheckerLocal Linux enumeration script that identifies privilege escalation vectors including misconfigurations, world-writable files, clear-text passwords,…
duriantaco/ravageEvidence first autonomous web security testing for controlled, authorized targets. With reproducible labs, audit trails, reports, and XBEN…
sho-luv/react2shellCVE-2025-55182 security test kit: CLI scanner + Chrome extension + Nuclei templates + Docker lab.
symphony2colour/htb-pterodactyl-rce-cve-2025-49132This repo contains RCE exploit for Pterodactyl htb machine
sn0wbaall/cve-2024-23334-pocAutomated proof-of-concept exploit for CVE-2024-23334, a path traversal vulnerability in aiohttp, enabling remote directory traversal and…