demining/scalar-venom-attackScalar Venom Attack: A critical HSM initialization vulnerability (CVE-2025-60013) enables private Bitcoin wallet key recovery through buffer overflow…
the-art-of-hacking/h4ckerCurated collection of cybersecurity resources, labs, and training materials covering ethical hacking, penetration testing, exploit development,…
christophe.duvernois/usb-spyIntercepts and analyzes USB Mass Storage traffic at the block and file level, emulates USB devices, and supports custom Python stubs for security…
sjkim1127/reversecore_mcpA security-first MCP server that empowers AI agents to perform automated reverse engineering, malware analysis, forensics, vulnerability research,…
rjbhide/wireshark-forensics-pluginWireshark plugin that correlates network traffic with threat intelligence, asset tags, and vulnerability data to accelerate forensic analysis of PCAP…
ivmks74/iiita-iot-security-researchIoT Security research conducted during my internship at IIIT Allahabad, leading to CVE-2026-65893, CVE-2026-65894, and the CERT-In Vulnerability Note…
kirkdjohnson/wiresharkDownloaded a packet capture (.pcapng) file from malware-traffic-analysis.net which was an example of an attempted attack against a webserver using…
gmikisilva/cve-2024-33901-proofofconceptShort program that demonstrates the vulnerability CVE-2024-33901 in KeePassXC version 2.7.7
arkha-corvus/letsdefend-soc173-follina-0-day-detectedWe are presented with a security alert indicating the detection of the Follina (CVE-2022-30190) vulnerability. A malicious Word document triggered…
azeemering/cve-2019-19781-dfir-notesMy Citrix ADC NetScaler CVE-2019-19781 Vulnerability DFIR notes.
iqbaalilmii/acropalypse-reconstructorA lightweight CLI tool to detect and reconstruct cropped images vulnerable to Acropalypse (CVE-2023-21036 and CVE-2023-28303) written in Python.
politoinc/xwfacropalypseX-Ways Acropalypse extension detects CVE-2023-21036 in common images
vdohney/keepass-password-dumperOriginal PoC for CVE-2023-32784
markuta/bw-dumpA proof-of-concept for (CVE-2023-38840) that extracts plaintext master passwords from a locked Bitwarden vault.
zavikhttak/follina-msdt-threat-investigation🔵 Threat analysis writeup for Follina (CVE-2022-30190) — Microsoft MSDT RCE zero-day exploited in the wild. Covers static analysis, VirusTotal,…
b1tbreaker/cve-2025-48708Lack of argument sanitization leading to password leakage in Ghostscript PDF versions up to 10.05.0.
zedocun/sharepoint-toolshell-cve-2025-53770-incident-analysisTechnical analysis of a SharePoint ToolShell (CVE-2025-53770) exploitation attempt involving RCE, webshell deployment, and MachineKey extraction.
