Tools

reddelexc/hackerone-reports

Curated collection of top HackerOne bug bounty reports organized by vulnerability type and program, with scripts to fetch, deduplicate, and rank…

ucsb-mlsec/vulnllm-r

Specialized reasoning LLM for source-code vulnerability detection in C/C++ and Python, with dataset construction, SFT/DPO training, and…

colmmacc/cve-2022-3602

Technical deep-dive and anti-POC for CVE-2022-3602, a punycode buffer overflow in OpenSSL 3.0.x, with reproduction scripts, stack analysis, and…

g4sp4rcs/cve-2026-42980-poc

Public exploit and research material for CVE-2026-42980, a Windows kernel WMI integer-underflow vulnerability enabling local privilege escalation to…

efchatz/http3-attacks

Educational exploit scripts for HTTP/3 attacks (CVE-2022-30592) including HTTP3-loris, HTTP3-stream, and HTTP3-flooding, tested against QUIC-enabled…

freeqaz/react2shell

RCE exploit toolkit for CVE-2025-55182 and CVE-2025-66478 in React Server Components. Includes multiple exploit variants, detection scripts, a…

efchatz/quic-attacks

Educational scripts demonstrating QUIC protocol attacks including CVE-2022-30591 exploitation, flooding, and slowloris techniques against major…

ffri/xprtestsuite

A collection of scripts and documents to help future XProtect Remediator (XPR) research

sak110/cve-2025-69219

Proof-of-concept exploit for CVE-2025-69219, demonstrating remote code execution in Apache Airflow Providers HTTP via unsafe pickle deserialization.…

ryehr/rrc_steganography

Provably secure linguistic steganography embedding secret messages into LLM-generated text via rotation range-coding. Includes embed, extract, and…

4xura/cve-2026-31431-copy-fail

Research artifacts, PoC scripts, and lab assets for the Copy Fail Linux local privilege escalation writeup on https://4xura.com/binex/kernel/copy-fail

horrister/moveit-transfer-cve-2023-34362

Curated vulnerability research repository with in-depth writeups, PoC scripts, and IOC detection tools for real-world security incidents like…

horrister/log4shell-cve-2021-44228

Curated collection of in-depth vulnerability writeups with full technical analysis, proof-of-concept detection scripts, IOC listings, and remediation…

horrister/axios-supply-chain-cve-2026-26555

Curated vulnerability writeup collection with full technical analysis, proof-of-concept scripts, IOC listings, and remediation guidance for…

doerrdan/it-sec-toolshell

Marp slide deck detailing CVE-2025-53770, a SharePoint zero-day vulnerability, with modular slides, custom themes, and build scripts for HTML, PDF,…

sparshbiswas-ai/cve-2026-0596-reproduction

Research environment and validation scripts for evaluating deserialization behaviors in MLflow and MLServer.

star-laboratory/prism

PrISM: A Scalable Probabilistic RowHammer Mitigation (ISCA 2026). Ramulator2 source code and evaluation scripts.