Triage-CVE-2017-0144
probablysecure/triage-cve-2017-0144Goal is to triage well known attacks and learn how security teams quickly respond.
educationincident-responselabs-practice+1
probablysecure/triage-cve-2017-0144Goal is to triage well known attacks and learn how security teams quickly respond.
chebuya/cve-2024-30851-jasmin-ransomware-path-traversal-pocJasmin ransomware web panel path traversal PoC
ahmetramazank/cve-2024-4577Demonstrates exploitation of CVE-2024-4577, a PHP CGI RCE on Windows, including attack steps, reverse shell deployment, and ransomware simulation…
vignesh-hp/lockbit-ransomware-analysisThreat intelligence and incident response case study on LockBit ransomware exploiting CVE-2023-4966 (Citrix Bleed).
jwa7470/cve-2026-20131-post-incident-written-reportPost-incident report on CVE-2026-20131 (CVSS 10.0), a Cisco FMC insecure deserialization vulnerability exploited by Interlock ransomware. Details…
captaingeech42/ransomwatchRansomware leak site monitoring
essexrich/threatactors-ttpsRepository created to share information about tactics, techniques and procedures used by threat actors. Initially with ransomware groups and evolving…
dannic145/eternalblue-exploit-demonstrationEducational lab demonstrating EternalBlue (MS17-010) exploitation against Windows 7 using Metasploit, including post-exploitation, WannaCry…
mkdemir/activemq-lockbit-analysisApache ActiveMQ (CVE-2023-46604) zafiyetinden LockBit ransomware aşamasına uzanan 419 saatlik sızma vakasının uçtan uca analizi, SIEM korelasyon…
kevin9480/security_incident_reportReact2Shell(CVE-2025-55182) 취약점 기반 침해 시나리오를 재현하고, Wazuh/Sysmon/Coraza WAF 로그로 침해사고를 분석·대응한 DFIR 프로젝트
joshhighet/ransomwatchthe transparent ransomware claim tracker 🥷🏼🧅🖥️
crocodyli/threatactors-ttpsRepository created to share information about tactics, techniques and procedures used by threat actors. Initially with ransomware groups and evolving…
bedrock-safeguard/gentlemen-decryptorFirst-ever decryptor for The Gentlemen ransomware — recovers encryption keys from process memory dumps using X25519 ephemeral key extraction. 35/35…
crackercat/rootsmart-v2.0Android Ransomware Development - AES256 encryption + CVE-2019-2215 (reverse root shell) + Data Exfiltration
anjai7/tryhack3m-bricks-heistTryHackMe CTF writeup — WordPress RCE via CVE-2024-25600, crypto miner forensics, and LockBit ransomware group identification
elastic/protections-artifactsElastic Security detection content for Endpoint
fortra/cve-2023-28252Technical analysis and proof-of-concept exploit for CVE-2023-28252, a Windows Common Log File System (CLFS) driver privilege escalation vulnerability…
byt3n33dl3/clfsit's a CVE-2023-28252 (Patched), but feel free to use it for check any outdated software or reseach