Tools

jas502n/ctf-rsa-tool

CTF-RSA-tool

l0n3m4n/cve-2024-47176

Unauthenticated RCE on cups-browsed (exploit and nuclei template)

gbuyssens/cve-2026-41651

Local privilege escalation via TOCTOU race condition in PackageKit's.

swammers8/subrioncms-4.2.1-file-upload-rce-auth-

This is an edited version of the CVE-2018-19422 exploit to fix an small but annoying issue I had.

oritwoen/shaha

Hash database builder and reverse lookup tool — SHA256, RIPEMD160, Keccak256, BLAKE3 and more

trivulzianus/tarantubench

The full repo of all the labs available as part of the benchmark

ycseo-git/cve-2025-55182

a.k.a. React2Shell

dungsocool/cve-2019-20933

Step-by-step lab writeup demonstrating CVE-2019-20933 InfluxDB authentication bypass via forged JWT tokens, including exploitation,…

saqib-butt2/blackbox-pentesting-infsecos

Full black-box penetration test against SecOS:1 (VulnHub) — CSRF exploitation, privilege escalation via CVE-2015-1328 (OverlayFS), post-exploitation

suriyaboon/hackthebox-facts

HTB Facts is a Easy Linux box featuring Camaleon CMS and MinIO. Gain admin access via open registration and a mass assignment vulnerability, then…

yuting-huang0/spring4shell-ctf

Spring4Shell (CVE-2022-22965) 漏洞環境搭建與 CTF 題目

cheese-hub/heartbleed

Demonstration of the Heartbleed Bug CVE-2014-0160

demining/digital-signature-forgery-attack

How CVE-2025-29774 Vulnerabilities and the SIGHASH_SINGLE Bug Threaten Multi-Signature Wallet Operational Methods with Fake RawTX

lockedbyte/cryptovenom

Cryptovenom: The Cryptography Swiss Army Knife

thefizzyfish/cve-2025-4138_tarfile_filter_bypass

CVE-2025-4138 - Python Arbitrary file write outside extraction directory

elf1337/blind-xxe-controller-cve-2021-29447

Arbitrary file read controller based on CVE-2021-29447

biitts/cve-2026-56782-gorse-auth-bypass

CVE-2026-56782 — Gorse <0.5.10 unauthenticated DB dump/restore (admin_api_key fail-open). Lab + PoC, verified e2e.