omarothmann/embedded-backdoor-connectionThis demonstration video shows how we can control the victim's device by sending the innocent-looking PDF file to the target which actually consists…
owasp/wrongsecretsVulnerable app with examples showing how to not use secrets
owasp/nodegoatThe OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how…
androidmalware/openclaw_termuxHow to Install OpenClaw on an Android Phone and Control It via WhatsApp
brnpl/flutter-reverse-engineering-labsHands-on challenges for learning how to reverse engineer Flutter applications.
syriusbughunt/cve-2018-14667All about CVE-2018-14667; From what it is to how to successfully exploit it.
xalicex/kernel-debug-lab-for-virtual-boxHow to set up 2 VirtualBox VM to debug kernel driver using windbg
kryptsec/oasisOpen-source AI security benchmarking CLI. Measure how AI models perform offensive security tasks with MITRE ATT&CK analysis and KSM scoring.
martinclauss/exim-rce-cve-2018-6789This repository provides a learning environment to understand how an Exim RCE exploit for CVE-2018-6789 works.
h4lpy/toastfix-demoProof-of-concept security demo illustrating how PowerShell can create trusted-looking Windows toast notifications chained together with…
makarov05bm/wsgoatThe vulnerable application that will teach you how to hack WebSockets
scottalt/ai-email-threat-researchA cybersecurity research game measuring how humans detect AI-generated phishing emails. Built as a retro terminal experience.
akshayithape-devops/cve-2022-42889-pocA simple dockerize application that shows how to exploit the CVE-2022-42889 vulnerability.
mschmnet/log4shell-demoDemo to show how Log4Shell / CVE-2021-44228 vulnerability works
toxy4ny/redteam-ai-benchmarkRed Team AI Benchmark: Evaluating LLMs for authorized offensive-security tasks. Red Team AI Benchmark is a CLI model-evaluation benchmark. It…
benedictejepu/cve-2024-24945-nginx-rift---tryhackme-lab-walkthroughThis lab demonstrates the exploitation of CVE-2024-24945, a heap corruption vulnerability affecting NGINX. The objective was to understand how memory…
probablysecure/triage-cve-2017-0144Goal is to triage well known attacks and learn how security teams quickly respond.
rauljvc8/cve-2025-68616-detecting-and-patching-an-ssrf-in-weasyprint-with-wazuhHands-on vulnerability management case study: how Wazuh flagged a real SSRF (CVE-2025-68616) in WeasyPrint, and how I reproduced and patched it.
