DeepTrap
zjuicsr/deeptrapSecurity benchmark for evaluating OpenClaw agents against adversarial execution contexts including poisoned files, injected skills, misleading tool…
adversarial-attackai-securitycommand-and-control+8
zjuicsr/deeptrapSecurity benchmark for evaluating OpenClaw agents against adversarial execution contexts including poisoned files, injected skills, misleading tool…
aramosf/cve-2026-54433Configurable Python PoC for CVE-2026-54433, a stored XSS in Roundcube's plain-text email renderer. Generates crafted .eml, sends via SMTP, and…
ethicalhackinglabs/metasploitable2-exploitation-metasploitFull Metasploit exploitation walkthrough against Metasploitable2 — vsftpd backdoor, Samba CVE-2007-2447, UnrealIRCd backdoor, Netcat exfiltration,…
maldev-academy/dumpbrowsersecretsExtracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bookmarks from…
owasp/igoatOWASP iGoat - A Learning Tool for iOS App Pentesting and Security by Swaroop Yermalkar
dicanio/cve-2021-44228-docker-exampleDocker-based demonstration of CVE-2021-44228 (Log4Shell) exploitation, featuring a vulnerable Java server, malicious LDAP server, and data…
jacobtaylor3/c2-and-post-exploitation-frameworkCVE-2021-21220 Exploitation infrastructure
tadash10/exploiting-cve-2021-44228-log4shell-in-a-banking-environmentObjective: Demonstrate the exploitation of the Log4Shell vulnerability (CVE-2021-44228) within a simulated banking application environment.
majpuv/flowise-arbitrary-file-read-getfilefromstorageUnauthenticated arbitrary file read in Flowise (< 2.2.4) via path traversal in getFileFromStorage (storageUtils.ts). Caused by un-sanitized file path…
devinliggins14/smb-pentest-exploiting-cve-2007-2447-on-metasploitable-2Step-by-step penetration testing lab exploiting Samba CVE-2007-2447 on Metasploitable 2 using Metasploit, demonstrating root compromise, credential…
dungsocool/cve-2017-10271Step-by-step lab guide for exploiting CVE-2017-10271 (WebLogic XMLDecoder deserialization RCE) with manual payload construction, blind RCE bypass,…
sastraadiwiguna-purpleeliteteaming/llamastack-rce-deterministic-supply-chain-exploitation-hardening-framework-cve-2024-50050-LlamaStack-RCE: Deterministic Supply Chain Exploitation & Hardening Framework [CVE-2024-50050] Focus on AI Security Research…
zwlsix/keepass-cve-2023-24055KeePass CVE-2023-24055复现
learner202649/cve-2026-35029-pocThe code for personally reproducing the corresponding vulnerability
inertfluid/cve-2026-54316-labReproduction lab for CVE-2026-54316 (Claude Code WebFetch huggingface.co bare-hostname permission bypass / exfiltration)
chasingimpact/cve-2025-66516-writeup-pocCVE-2025-66516 working exploit, scanner, explanation.
biitts/cve-2026-56782-gorse-auth-bypassCVE-2026-56782 — Gorse <0.5.10 unauthenticated DB dump/restore (admin_api_key fail-open). Lab + PoC, verified e2e.