
Triage-CVE-2017-0144
Goal is to triage well known attacks and learn how security teams quickly respond.

Goal is to triage well known attacks and learn how security teams quickly respond.

The vulnerable application that will teach you how to hack WebSockets

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

YC (S26) | Open Computer History | Record your screen continuously locally and provide context to your agents (Claude, Codex, Openclaw, Hermes,…

A cybersecurity research game measuring how humans detect AI-generated phishing emails. Built as a retro terminal experience.

Vulnerable app with examples showing how to not use secrets

Behavioral Malware Analysis of a Simulated Multi-Stage Windows Malware Sample using FLARE-VM and REMnux. Evidence-driven DFIR investigation with IOC…

Hands-on vulnerability management case study: how Wazuh flagged a real SSRF (CVE-2025-68616) in WeasyPrint, and how I reproduced and patched it.

An app with really insecure crypto. To be used to see/test/exploit weak cryptographic implementations as well as to learn a little bit more about…

This repository provides a detailed walkthrough of the *Solar Exploiting Log4j room* on TryHackMe, focusing on exploiting the critical Log4Shell…

Next.js and the corrupt middleware...TRY TO HACK IT..!

Proof-of-concept security demo illustrating how PowerShell can create trusted-looking Windows toast notifications chained together with…

Collection of steganography tools - helps with CTF challenges

A curated list of awesome OSCP resources

The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how…

A modular framework for benchmarking LLMs and agentic strategies on security challenges across HackTheBox, TryHackMe, PortSwigger Labs, Cybench,…

How to set up 2 VirtualBox VM to debug kernel driver using windbg

This repository provides a high-fidelity technical deconstruction and production-ready exploitation suite for CVE-2019-5736. It demonstrates how a…