
ImageMagick-lfi-poc
Proof-of-concept exploit for CVE-2022-44268 enabling arbitrary file read via crafted PNG images processed by ImageMagick. Includes generation and…

Proof-of-concept exploit for CVE-2022-44268 enabling arbitrary file read via crafted PNG images processed by ImageMagick. Includes generation and…

This is an automated exploitation script for the Hack The Box machine *Titanic*. It extracts Gitea user hashes via LFI, assists in cracking them, and…

CVE-2021-29447 - Authenticated XXE Injection - WordPress < 5.7.1 & PHP > 8

A collection of various awesome lists for hackers, pentesters and security researchers

Curated collection of cybersecurity resources, labs, and training materials covering ethical hacking, penetration testing, exploit development,…

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

Curated collection of wordlists for security assessments, including usernames, passwords, URLs, fuzzing payloads, and sensitive data patterns for…

A collection of awesome penetration testing resources and tools

🐶 A curated list of Web Security materials and resources.

Curated collection of top HackerOne bug bounty reports organized by vulnerability type and program, with scripts to fetch, deduplicate, and rank…

The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation…

📡 Comprehensive collection of OSINT tools for cybersecurity professionals, researchers, and bug bounty hunters. Topics: information gathering,…

A curated list of cybersecurity tools and resources.

Complete Listing and Usage of Tools used for Ethical Hacking

Git All the Payloads! A collection of web attack payloads.

A curated list of hacking environments where you can train your cyber skills legally and safely

Build a database of libc offsets to simplify exploitation

A curated list of awesome Android Reverse Engineering training, resources, and tools.