rapid7/metasploit-frameworkOpen-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…
wireshark/wiresharkCapture and analyze network traffic with deep packet inspection, protocol decoding across hundreds of protocols, and capture-file support for…
nmap/nmapHigh-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…
iti/ics-security-toolsTools, tips, tricks, and more for exploring ICS Security.
exploit-garbage/0day-rubbishRedefining vulnerability disclosure in the AI era. We mass-produce exploitable 0days and disclose them directly, using event-driven pressure to…
rabobank-cdc/dettectDetect Tactics, Techniques & Combat Threats
v33ru/awesome-connected-things-secA Curated list of Security Resources for all connected things
mitre-attack/attack-stix-dataSTIX 2.1 collections of the MITRE ATT&CK knowledge base, providing adversary tactics and techniques for enterprise, mobile, and ICS threat…
murrez/cve-2026-8065Python PoC for CVE-2026-8065: fingerprints Hitachi Energy RTU500 devices and probes firmware update endpoints for unauthenticated upload, with check,…
uphiago/recon-skillsField-validated offensive security skill pack with 169 techniques for reconnaissance and penetration testing. Covers CORS, SSRF, subdomain takeover,…
wattocyber/detection-defense-libraryDetection-engineering reference mapping Windows, cloud, container, identity, and ICS attack classes to Sigma rules, trust-boundary models, BYOVD…
yakushstanislav/ultravioletSelf-hosted network discovery and search engine with continuous port scanning, deep protocol probing across ~100 services, local CVE matching, and…
george0papasotiriou/cve-2026-21018-opc-ua-authentication-bypass-via-none-security-policyProof-of-concept exploit for OPC UA authentication bypass using None security policy, including a simulated server to demonstrate unauthorized…
pcrosby-1990/cip-security-pocProof-of-concept reproducing CVE-2021-22681's hardcoded-key flaw and validating a per-device mutual TLS/CRL fix over simulated EtherNet/IP, with IEC…
if-forget/cve-2026-52134-libiec61850Public technical advisory and reproduction evidence for CVE-2026-52134 affecting GOOSE replay handling in libiec61850 v1.6.
scy-phy/minicpsReal-time simulation framework for cyber-physical systems with physical process/control device models and Mininet-based network emulation, built for…
mbanyamer/cve-2026-22553-insat-masterscada-buk-ts-mmadmservUnauthenticated OS command injection exploit for InSAT MasterSCADA BUK-TS MMadmServ web interface. Delivers reverse shell with root privileges via…
