
house_of_apple_2
Interactive GDB walkthrough of the House of Apple 2 FSOP technique on glibc 2.43, with a reproducible sandbox covering vtable bypass, stack pivoting,…

Interactive GDB walkthrough of the House of Apple 2 FSOP technique on glibc 2.43, with a reproducible sandbox covering vtable bypass, stack pivoting,…

Hands-on lab demonstrating Apache Struts2 OGNL injection (CVE-2017-5638) with step-by-step system analysis, exploitation, sandbox bypass, and…

CVE-2026-0006: Heap buffer overflow PoC for libopenapv (Android APV codec) - CVSS 9.8

Hands-on CI/CD pipeline security workshop with Terraform lab, AWS exploitation, Kubernetes escape, and artifact backdooring exercises for offensive…

In this workshop session, we will extract firmware from an EV charger, dig into the firmware, and eventually emulate it so we can interact with the…

Useful resources for SOC Analyst and SOC Analyst candidates.

[AtHack 2026] Pwn challenge about telnetd CVE-2026-24061

This demonstration video shows how we can control the victim's device by sending the innocent-looking PDF file to the target which actually consists…

A TryHackme room covering the CVE-2025-53779 exploitation using windows

Structured challenge repository offering bounties for breaking a neural-network-based random number generator validated against NIST SP 800-22 and SP…

Trail of Bits Testing Handbook - appsec.guide

Materials for the second Rijeka secuity meetup. We will be discussing Microsoft cryptoapi vulnerability dubbed CurveBall (CVE-2020-0601)

This experiment is destinated to demonstrate how the DNS rebinding attack works on an emulated IoT. In the setup, we have a simulated IoT device,…

A detailed walkthrough of Billing room exploiting CVE-2023-30258 and escalating via fail2ban misconfig

Create an exploit to libssh2 vulnerabulity described in CVE-2019-13115

A CodeQL workshop covering CVE-2021-21380

Exploit the dirtycow vulnerability to login as root

beginner friendly write-up for the TryHackMe easy level module- polkit:CVE-2021-3560