Tools

hophtien/cve-2025-54424

CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <=…

screenpipe/screenpipe

YC (S26) | Open Computer History | Record your screen continuously locally and provide context to your agents (Claude, Codex, Openclaw, Hermes,…

ashardev002/cve-2025-32463_chwoot

🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.

mthamil107/db_audit_research

Self-Defeating Audits: reproducible lab showing a low-privilege PostgreSQL role reversibly blinding a trigger-based auditor + poisoning attribution…

owasp/owasp-scs

OWASP Smart Contract Security (SCS) Project

horkimhab/cve-2026-73072

Educational security research repository for testing and learning vulnerability concepts, sandboxing, secure coding, and defensive practices in…

mayca369/cve-2025-55182

Demonstrates CVE-2025-55182 RCE exploit in React Server Functions to highlight insecure prototype references in Next.js, with educational simulation…

horkimhab/cve-2024-8068-cve-2024-8069

Proof-of-concept exploit scripts for CVE-2024-8068 and CVE-2024-8069, focused on authorized penetration testing, educational labs, and defensive…

horkimhab/cve-2026-18504-cve-2026-16732

Educational repository for documenting and testing CVE proof-of-concept exploits inside isolated labs, virtual machines, and authorized penetration…

koadt/oss-oopssec-store

Security training for the apps you actually ship. Open your browser and start hacking.

gmh5225/awesome-ai-security

A curated list of AI Security materials and resources for Pentesters, Bug Hunters, and Security Researchers.

wattocyber/oscp-notes-2026

OSCP field notebook by Samson Laird: merged technique vault, numbered notes (MIT)

horkimhab/cve-2026-19650-cve-2026-19478

Proof-of-concept exploit resources for CVE-2026-19650 and CVE-2026-19478 targeting a GitLab GraphQL vulnerability, intended for authorized research,…

shredzwho/ig-detective

OSINT tool researched and designed to hunt down IG handles

priyanshu-rawa/cybersecurity-handbook

A community‑driven cybersecurity knowledge base with 400+ notes, mind‑maps, and cheat‑sheets – built from first principles. Ideal for students, SOC…

rawsec/rawsec-cybersecurity-list

Curated inventory of cybersecurity tools and resources covering penetration testing, forensics, OSINT, web security, malware analysis, cryptography,…

giordy0424/cve-2023-25690_lab

HTTP Request Smuggling lab: Apache 2.4.55 CRLF injection

umidguluzada/cyberdefense-lab

A complete Blue Team Cybersecurity Lab featuring pfSense, Suricata, and ELK Stack for network monitoring and threat detection.