Tools

themalwareguardian/cve-2024-7344

Technical research on a UEFI Secure Boot bypass caused by an unsafe custom PE loader, including root-cause analysis, exploitation workflow, and an…

ares-sys/uefi_bootkit_softlanding

First public analysis of SoftLanding UEFI bootkit: Ring -2 implant, CVE-2025-7029, 240+ Gigabyte boards, GPU AI evasion, dual C2. YARA + Sigma +…

google/bindiff

Quickly find differences and similarities in disassembled code

zavikhttak/follina-msdt-threat-investigation

🔵 Threat analysis writeup for Follina (CVE-2022-30190) — Microsoft MSDT RCE zero-day exploited in the wild. Covers static analysis, VirusTotal,…

mmiszczyk/cve-2021-33879

GameLoop update MITM

moscovium-mc/tor-0day-javascript-exploit

Firefox/Tor Browser 0day exploit analysis (CVE-2024-9680) A UAF in animation timelines leading to RCE. Patched.

mranv/honeypot.rs

CVE-2023-46604 (Apache ActiveMQ RCE Vulnerability) and focused on getting Indicators of Compromise.

nccgroup/cve-2017-8759

NCC Group's analysis and exploitation of CVE-2017-8759 along with further refinements

nokn0wthing/cve-2023-20052

CVE-2023-20052, information leak vulnerability in the DMG file parser of ClamAV

zer0t0/cve-2025-56383-proof-of-concept

CVE-2025-56383-Proof-of-Concept

cyprianatsyor/letsdefend-cve-2024-49138-investigation

Hands-on SOC investigation of CVE-2024-49138 using LetsDefend, VirusTotal, Hybrid Analysis, TrueFort, and ChatGPT.

kirkdjohnson/wireshark

Downloaded a packet capture (.pcapng) file from malware-traffic-analysis.net which was an example of an attempted attack against a webserver using…

pexlexity/winrar-cve-2025-8088-path-traversal-poc

Proof-of-Concept for CVE-2025-8088 vulnerability in WinRAR (path traversal via ADS)

firetemple/blackash-cve-2017-0144

CVE-2017-0144

gray-0men/cve-2024-22774

Panoramic Dental Imaging software Stealthy Privilege Escalation Vulnerability

cyberclues/rtf_exploit_extractor

Script to extract malicious payload and decoy document from CVE-2015-1641 exploit documents

stevehenderson/lab_xz_backdoor

Some labs looking at the xz backdoor vulnerability (CVE-2024-3094)