Tools

sbousseaden/evtx-attack-samples

Curated collection of Windows EVTX attack samples mapped to MITRE ATT&CK techniques, designed for testing detection scripts, DFIR training, and…

dulieno/cve-2026-26012

Proof-of-concept exploit for CVE-2026-26012, a broken access control in Vaultwarden that allows any organization member to enumerate and decrypt all…

jianshuod/ipi-exposure-signal

Research pipeline for detecting latent indirect prompt-injection exposure signals in agentic LLMs via hidden-state probing, including trace…

fabacab/awesome-cybersecurity-blueteam

💻🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.

meirwah/awesome-incident-response

Curated index of incident response and DFIR tools, including memory and disk forensics, evidence collection, log analysis, playbooks, and educational…

drduh/macos-security-and-privacy-guide

Curated macOS security and privacy guide with practical instructions for threat modeling, disk encryption, firewall configuration, secure…

gmh5225/awesome-llvm-security

Curated collection of LLVM security resources covering binary lifting, code obfuscation, static analysis, symbolic execution, sanitizers, and…

losfuzzys/glacierctf2023_writeups

Curated CTF writeup collection for GlacierCTF 2023 covering pwn, rev, web, crypto, and smart contract challenges with solutions and educational…

liam-worsley/cve-2025-32433-poc-analysis

This is an analysis for CVE-2025-32433 (Erlang OTP SSH Vulnerability). I did not write any of the code, I only wrote comments describing what the…

nanashibx2/bx2-writeups

Cybersecurity writeups, walkthroughs, and technical notes by Nanashi Bx2.

horkimhab/llm-prompt-injection-resources

A curated collection of resources for learning and researching LLM prompt injection attacks, defenses, and security.

star-sg/notquite0day

Curated collection of real-world vendor-ignored vulnerability reports with affected versions, organized by publication date for security researchers…

mikem64/exploit-writeups

Exploit writeups I've authored

decalage2/awesome-security-hardening

A collection of awesome security hardening guides, tools and other resources

reprise99/sentinel-queries

Collection of KQL queries

paulveillard/cybersecurity-interview-questions

A collection of awesome framework, libraries, learning tutorials, videos, webcasts, technical resources and cool stuff about Interview for Security &…

michenriksen/drawio-threatmodeling

Draw.io libraries for threat modeling diagrams

cloud-architekt/azuread-attack-defense

This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can…