circuit-artist
lets-all-be-stupid-forever/circuit-artistDigital logic simulation game with event-driven engine, propagation delays, and campaign system for learning circuit design through pixel-based NAND…
ctfeducationhardware-security+2
474
lets-all-be-stupid-forever/circuit-artistDigital logic simulation game with event-driven engine, propagation delays, and campaign system for learning circuit design through pixel-based NAND…
jeanpeyremesmots/osx-password-dumperA tool to dump users's .plist on a Mac OS system and to convert them into a crackable hash
gosuda/ssh-chatterModern C SSH/TELNET bulletin board system with AI-moderated chat, retro BBS features, file transfers, RSS reader, and JSON automation API. Supports…
owasp/ai-vulnerabilities-playgroundHands-on AI security lab platform with 50+ scenarios across prompt injection, agentic system exploitation, model manipulation, and MCP trust boundary…
entr0pie/cve-2022-44268Proof-of-concept exploit for ImageMagick arbitrary file read vulnerability (CVE-2022-44268) via crafted PNG textual chunks, enabling extraction of…
ageofalgorithms/mahoraga-webapp-defenderAI-powered reactive website defense system that detects attacks, analyzes them, and autonomously patches source code in real-time using LLM agents.
dfdxarjy/htb-nanocorp-cve-2024-0670PowerShell exploit for CVE-2024-0670, abusing CheckMK Agent MSI repair to escalate from low-privileged user to SYSTEM on Windows targets. Designed…
syn-4ck/wvctfGamified web platform for pentesting and web application security training. Users find flags in a vulnerable app to learn about common web…
sethwhy/bluedoorCan you exploit the EternalBlue vulnerability (CVE-2017-0144) on a Windows 7 system and retrieve the hidden flag? Your goal is to gain administrative…
xmyronn/cve-2026-11518-xssProof-of-concept for unauthenticated stored XSS in SourceCodester Inventory System, demonstrating admin session hijacking via crafted registration…
drackyjr/cve-2025-8018Python PoC exploit for CVE-2025-8018, a critical unauthenticated SQL injection in Food Ordering Review System v1.0. Supports time-based blind and…
qduarte-42/snow-crashHands-on cybersecurity curriculum introducing system exploitation, privilege escalation, and vulnerability analysis through 14 progressive…
pruthuraut/cve-2025-46173Proof-of-concept for CVE-2025-46173, a stored XSS vulnerability in Online Exam Mastering System 1.0. Includes injection steps, trigger mechanism, and…
heathen42/ctfCurated collection of CTF challenge solutions covering binary exploitation, reverse engineering, and system security with detailed write-ups.
cved-sources/base-drupalDocker base image for vulnerable Drupal 8.3.0, used in security training and penetration testing labs via the Cved vulnerable container management…
p1rat3r00t/why-so-serious-samPoC malware that uses exploit CVE-2021-36934 (improper ACLs on shadow copies) using a fileless red team method on Windows 10/11 with LOLBins,…
pallangyo98/trickster-htbStep-by-step exploitation report for the Trickster HTB machine, chaining XSS in PrestaShop, SSTI in ChangeDetection.io, and privilege escalation via…
1h3ll/cve-2025-50365_csrf_delete_category-phpgurukul-cvePoC for CVE-2025-50365: a CSRF flaw in PHPGurukul Maid Hiring Management System allowing deletion of hiring categories via a crafted admin request.