huhusmang/awesome-llms-for-vulnerability-detectionThe community's most comprehensive, continuously-updated index of research on Large Language Models for software vulnerability detection — papers…
florianmattana/sass-kingReverse engineering NVIDIA SASS instruction dictionary, kernel audits and pattern recognition across GPU architectures.
concollmic/concollmicLLM-agent-powered concolic execution engine that instruments source code, summarizes path constraints in natural language, and generates test cases…
zerowang030221/quantum-algorithm-for-elliptic-curve-discrete-logarithms-with-space-efficient-point-additionQiskit-based resource estimation framework for space-efficient quantum modular inversion and affine point-addition circuits used in elliptic-curve…
bytepro-ai/bitcoder-v2-researchResearch repository documenting LLM generalization ceilings in code security vulnerability detection, with cross-evaluation across synthetic and…
cydtseng/vulnerability-researchCurated repository of vulnerability research write-ups with assigned CVEs, detailing discovered weaknesses, impact, and remediation across various…
hyperps/cve-2026-0848nltk.tokenize.StanfordSegmenter dynamically loads external Java .jar files without verification or sandboxing. If an attacker can supply or replace…
lycis/cawdogCAWODOG is a proof-of-concept project demonstrating how to protect Python-based AI models deployed on offline industrial machines. Across three…
analysis-tools-dev/static-analysisCurated directory of static analysis (SAST) tools and linters for programming languages, configs, build tools, and CI, focused on improving code…
meta-llama/purplellamaSet of tools to assess and improve LLM security.
gmh5225/awesome-llvm-securityCurated collection of LLVM security resources covering binary lifting, code obfuscation, static analysis, symbolic execution, sanitizers, and…
0xnazgul/blockchain-security-audit-listA list of Blockchain Security audit companies, solo auditors and location of public audits.
ucsb-mlsec/vulnllm-rSpecialized reasoning LLM for source-code vulnerability detection in C/C++ and Python, with dataset construction, SFT/DPO training, and…
vladko312/research_successful_errorsWhitepaper introducing Error-Based and Boolean Error-Based Blind techniques for SSTI and Code Injection, with universal payloads for six programming…
freeqaz/react2shellRCE exploit toolkit for CVE-2025-55182 and CVE-2025-66478 in React Server Components. Includes multiple exploit variants, detection scripts, a…
zypherion-technologies/unconfuserexA ConfuserEx2 deobfuscator with support for anti tamper, compressor, constants, control flow, and resource recovery.
purs3lab/argusStaged static taint analysis framework for GitHub Actions workflows. Detects code injection vulnerabilities using taint-tracking and an impact…
munshi007/aura-statePython framework for building LLM workflows as state machines with formal verification via Z3 theorem proving, CTL model checking, and conformal…
