Tools

navaidzansari/cve_demo

Curated collection of CVE demonstrations with fix recommendations for hands-on vulnerability analysis and educational exploitation practice.

horkimhab/cve-2026-0768

Educational proof-of-concept for CVE-2026-0768, demonstrating exploitation techniques in controlled environments for authorized security research and…

huanlu/cve-2014-6271-huan-lu

Curated reading course on CVE-2014-6271 (Shellshock) vulnerability, covering exploitation analysis and defensive insights for educational purposes.

kaleth4/cve-2026-7482

Technical analysis and educational documentation of CVE-2026-7482, a critical heap buffer over-read in Ollama's GGUF loader, including exploitation…

mehrzad1994/cve-2021-21193

Educational presentation analyzing CVE-2021-21193, a use-after-free vulnerability in Google Chrome's Blink engine, including exploitation details and…

sundowndev/hacker-roadmap

A collection of hacking tools, resources and references to practice ethical hacking.

bikini/exploitarium

Curated archive of public proof-of-concept exploits and vulnerability research writeups covering web, binary, and network security, with a focus on…

gal-nagli/shockwave-oss

Curated collection of bug bounty tips, one-liners, and automation workflows for recon, fuzzing, and web exploitation, with private nuclei templates…

metnew/write-ups

Curated collection of technical write-ups detailing RCE vulnerabilities in GitHub Desktop, GitHub CLI, and Claude Code, with CVE references and…

hackerschoice/team-teso

Historical archive of exploit code and tools from TESO, including remote exploits, DDoS agents, and development utilities for educational security…

m0nad/papers

Curated collection of security research papers and technical articles covering exploitation, reverse engineering, malware analysis, and defensive…

nccgroup/rustproofing-linux

Educational examples porting Linux kernel vulnerabilities to Rust, featuring intentionally vulnerable code and exploits for learning kernel security…

losfuzzys/glacierctf2023_writeups

Curated CTF writeup collection for GlacierCTF 2023 covering pwn, rev, web, crypto, and smart contract challenges with solutions and educational…

dead-lamer/cve-2026-27654

Russian-language overview and analysis of the n-day vulnerability CVE-2026-27654, covering exploitation details and technical breakdown.

adityabhatt3010/cve-2025-59287-when-your-patch-server-becomes-the-attack-vector

CVE-2025-59287 — Critical unauthenticated RCE in Windows Server Update Services (WSUS) via unsafe deserialization of an AuthorizationCookie, enabling…

nu11secur1ty/python

Curated collection of Python scripts and tutorials for penetration testing, web security, and exploitation techniques, designed for security…

vorburger/log4j_cve-2021-44228

Curated resource hub for Log4j CVE-2021-44228, covering detection, mitigation, exploitation, and dependency management strategies for the critical…

thel1nus/cve-2004-1561-notes

My notes for CVE-2004-1561 IceCast exploitation