Tools

yasinyilmaz/vuln-chm-hijack

Potential malicious code execution via CHM hijacking (CVE-2019-9896)

omarothmann/embedded-backdoor-connection

This demonstration video shows how we can control the victim's device by sending the innocent-looking PDF file to the target which actually consists…

aramosf/cve-2026-54433

Configurable Python PoC for CVE-2026-54433, a stored XSS in Roundcube's plain-text email renderer. Generates crafted .eml, sends via SMTP, and…

omarmahmoud1024/tryhackme-monikerlink-writeup

TryHackMe Moniker Link (CVE-2024-21413) walkthrough: Outlook Protected View bypass leading to NTLMv2 hash capture via a crafted moniker link.

manishrawat21/detection-rules

This repository contains validated detection rules for adversary behaviors observed during APT29 simulation. Each rule was tested against the actual…

cappricio-securities/camjacking-templates

camjacking templates

jpoindexter/interrogation-game

Voice-based detective interrogation game. Mistral Large 3 + Voxtral STT + ElevenLabs TTS. Built for the Mistral Worldwide Hackathon 2026.

boredchilada/clickfix-simulator-2025

A lightweight, self-hosted simulation tool for "ClickFix" (ClearFake) social engineering training. Safely simulates clipboard-injection attacks with…

nephila016/cve-2025-55319-poc

PoC for CVE-2025-55319

razureink/cve-2024-43451-ntlm_hash_disclosure_reproduction

CVE Reproduction: cve-2024-43451-ntlm_hash_disclosure_reproduction

mj-bin/poc_cve-2026-45185

POC_CVE-2026-45185 for nuclei-templates

d1se0/cve-2024-21413-vulnerabilidad-outlook-lab

Educational lab demonstrating CVE-2024-21413 Outlook vulnerability exploitation with Python email exploit tool and Responder for NTLM credential…

solmin111/opensmtpd-cve-2020-7247-

Docker-based lab demonstrating CVE-2020-7247 remote code execution in OpenSMTPD 6.6.1p1 with a Python PoC for educational security testing.

abhayclasher/cve-2026-33331

Local lab reproducing stored XSS in oRPC's OpenAPI docs generation (CVE-2026-33331), with vulnerable and patched versions for comparison and a…

shndnth/cve-2022-30190

Educational Proof-of-Concept for the CVE-2022-30190 (Follina) vulnerability.

pedro-lucas-melo/estudo-de-caso-cve-2024-21413

Um estudo de caso do CVE-2024-21413. Usado como parâmetro a sala do TryHackMe Moniker Link (CVE-2024-21413). Feito edições com claude code no exploit.

cmadhushanka/wordpress-rce-vapt-cve-2020-25213

Educational cybersecurity project demonstrating exploitation and mitigation of CVE-2020-25213 (WordPress File Manager Plugin RCE). Includes malware…

polarisxsec/cve-2024-21413

Educational lab demonstrating CVE-2024-21413 exploitation in Outlook to leak NTLM hashes via malicious UNC links, with custom SMTP/POP3…