yara-rules
inquest/yara-rulesCollection of YARA rules for hunting malware, malicious Office documents, and exploit artifacts, with references to samples and research write-ups.
curated-resourcesdefensive-toolsincident-response+5
389
inquest/yara-rulesCollection of YARA rules for hunting malware, malicious Office documents, and exploit artifacts, with references to samples and research write-ups.
eset/malware-researchCode written as part of our various malware investigations
yasindce1998/barzakhRing -4 to Ring 0: offense-defense firmware research platform. We build the bootkits, then we catch them. Closed-loop. Zero trust in silicon.
slowmist/knowledge-baseCurated knowledge base of blockchain security research, audit reports, guides, and translations covering smart contracts, cryptography, and AI…
greshake/llm-securityProof-of-concept demos and research on indirect prompt injection attacks against application-integrated LLMs, covering data exfiltration, remote…
jazho76/house_of_apple_2Interactive GDB walkthrough of the House of Apple 2 FSOP technique on glibc 2.43, with a reproducible sandbox covering vtable bypass, stack pivoting,…
ut-dacs/anycast-censusLongitudinal anycast census system that probes IPv4/IPv6 prefixes via ICMP, TCP, and DNS to detect anycast deployments and geolocate PoPs, publishing…
mobilehackinglab/cve-2026-28576-pocEducational proof-of-concept demonstrating a SQL injection vulnerability in Android 17's Contacts Provider, allowing a zero-permission app to…
papers-we-love/papers-we-lovePapers from the computer science community to read and discuss.
enablesecurity/vulnerability-disclosure-policyHow Enable Security handles security vulnerabilities
httpvoid/cve-reverseCurated list of CVEs that have been reverse-engineered and analyzed, serving as a resource for vulnerability research, exploitation understanding,…
vinsontang1/dcvdThe code in "DCVD: Dual-Channel Cross-Modal Fusion for Joint Vulnerability Detection and Localization"
trailofbits/quantum-zk-proof-pocProof-of-concept code for beating Google's ZK proof of quantum cryptanalysis
rooobeam/pickle-deserialization-exploit-in-transformersThis study analyzes Python pickle deserialization vulnerabilities, focusing on CVE-2024-3568 in Hugging Face Transformers' TFAutoModel. We reproduce…
thepwnrip/lehack-analysis-of-cve-2018-8453Conference talk analyzing CVE-2018-8453, a Windows kernel UAF and double-free vulnerability. Covers binary diffing, exploit reproduction, heap spray,…
rkrakesh524/oob_entryoob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming…
edubr2020/cve-2021-40444--cablessModified code so that we don´t need to rely on CAB archives
musergi/cve-2021-3156Educational exploit implementation and analysis of CVE-2021-3156, a heap-based buffer overflow in sudo's set_cmnd() function, enabling privilege…