awesome-ethical-hacking-resources
husnainfareed/awesome-ethical-hacking-resources😎 🔗 Awesome list about all kinds of resources for learning Ethical Hacking and Penetration Testing.
ctfcurated-resourceseducation+7
husnainfareed/awesome-ethical-hacking-resources😎 🔗 Awesome list about all kinds of resources for learning Ethical Hacking and Penetration Testing.
dharmstm/cve-2026-30502-openkm-6.3.12-reflected-xssDocumentation and proof-of-concept for CVE-2026-30502, a reflected XSS vulnerability in OpenKM v6.3.12. Includes technical analysis, root cause,…
kaleth4/cve-2026-20180In-depth technical analysis of Cisco ISE RCE vulnerabilities, including exploitation techniques, evasion methods, and remediation strategies for…
quangnh89/cve-2022-4262Full technical analysis of CVE-2022-4262 including root cause identification, proof-of-concept exploit, and working exploit code for security…
mouteee/autonomous-offensive-llm-handbookA deterministic harness and handbook for autonomous offensive LLM agents, enforcing authorization, scope, and evidence gates to ensure reproducible…
nu11secur1ty/rtfmComprehensive book on penetration testing and red teaming operations, covering exploitation, post-exploitation, and adversary simulation techniques…
enovella/tee-reversingA curated list of public TEE resources for learning how to reverse-engineer and achieve trusted code execution on ARM devices
zalexdev/wpair-appWPair is a defensive security research tool that demonstrates the CVE-2025-36911 (eg WhisperPair) vulnerability in Google's Fast Pair protocol. This…
canyie/cve-2024-0044Proof-of-concept and writeup for bypassing the initial patch of CVE-2024-0044, an Android framework vulnerability enabling privilege escalation from…
owasp/masweOWASP enumeration of common security and privacy weaknesses in mobile applications, serving as a reference bridging the MASVS verification standard…
project-artist/artistOpen-source instrumentation framework for Android apps and Java middleware, modifying code during on-device compilation via the ART compiler.…
michalbednarski/resourcepoisonWriteup and exploit for CVE-2025-22441: Privilege escalation from installed app to SystemUI process on Android due to pass of untrusted…
michalbednarski/thelastbundlemismatchWriteup and exploit for CVE-2023-45777, bypass for Intent validation inside AccountManagerService on Android 13 despite "Lazy Bundle" mitigation
amnestytech/inside-pegasusA curated set of NSO Group internal documents, product materials and sworn testimony that entered the public record in WhatsApp Inc. and Meta…
thomasking2014/slidesCurated collection of security conference slide decks covering Android rooting, kernel exploitation, browser memory corruption, JIT mitigations, and…
frenchyeti/rasputinRessources and papers related to my conferences and work on (un)RASPs. These work is in progress, please be patient :) Don't hesitate to contribute /…
cxxsheng/cve-2022-20474Detailed technical analysis and proof-of-concept for Android CVE-2022-20474, a Bundle mismatch vulnerability exploiting LazyValue with negative…
jinxhy/awesome-moai-securityCurated reading list and taxonomy of attack and defense research for mobile on-device AI systems, covering adversarial, backdoor, model stealing, and…