h4cker
the-art-of-hacking/h4ckerCurated collection of cybersecurity resources, labs, and training materials covering ethical hacking, penetration testing, exploit development,…
ai-securityctfcurated-resources+8
29.3k
the-art-of-hacking/h4ckerCurated collection of cybersecurity resources, labs, and training materials covering ethical hacking, penetration testing, exploit development,…
ashardev002/cve-2025-32463_chwoot🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.
fankh/vulnerability-pocCVE proof-of-concept labs, exploit scripts, and detection/prevention rules (Nginx, Apache, Snort, YARA) for high-severity CVEs. Authorized security…
hibanitt/cve-2024-38063In-depth technical analysis and proof-of-concept for CVE-2024-38063, a critical Windows IPv6 kernel RCE. Includes root-cause breakdown, Scapy-based…
gmh5225/awesome-ai-securityA curated list of AI Security materials and resources for Pentesters, Bug Hunters, and Security Researchers.
cgrtml/reasongateExplainable security gate for LLM apps — blocks prompt injection with an auditable reason for every decision.
sunweb3sec/defihacklabsReproduce DeFi hacked incidents using Foundry.
qazbnm456/awesome-web-security🐶 A curated list of Web Security materials and resources.
redcanaryco/atomic-red-teamSmall and highly portable detection tests based on MITRE's ATT&CK.
joaovicdev/exploit-cve-2026-22778Proof-of-concept exploit for CVE-2026-22778, an unauthenticated RCE in vLLM's video processing, demonstrating heap address disclosure and a heap…
owasp/wrongsecrets-binariesSource code for the Binaries of OWASP WrongSecrets
pvharmo2/gha-lab-6c3094af9eAuthorized security-research lab reproducing CVE-2026-27941 (pwn request in pull_request_target workflows) — snapshot of openlit/openlit
pvharmo2/gha-lab-b5c1313658Authorized security-research lab reproducing CVE-2026-1699 (pwn request in preview.yml) — snapshot of eclipse-theia/theia-website
systemslibrarian/crypto-lab-merkle-proofsBrowser-based Merkle tree demo — build a tree, generate inclusion proofs, recompute the root hash by hash, and replay the RFC 6962 second-preimage…
alardiians/gitea-cve-2026-28699Lab + writeup for CVE-2026-28699: Gitea OAuth2 scope enforcement bypass via HTTP Basic auth
b-abderrahmane/cve-2021-44228-playgroundDocker-based lab to validate CVE-2021-44228 (Log4Shell) in Java apps, test mitigations, and simulate RCE via LDAP and HTTP payloads.
adisasoc/cve-2024-49138-soc-investigationSOC investigation of CVE-2024-49138 exploitation involving brute-force activity, PowerShell execution, malicious payload analysis, privilege…
pvharmo2/gha-lab-0ba60e6456Authorized security-research lab reproducing CVE-2024-39700 / GHSA-45gq-v5wm-82wg (JupyterLab extension-template update-integration-tests pwn request)