phantomdrive
o7-machinehum/phantomdriveSeemingly normal USB drive with a hidden security feature
cryptographydata-recoveryembedded-systems-security+3
716
o7-machinehum/phantomdriveSeemingly normal USB drive with a hidden security feature
e-m-b-a/embaEMBA - The firmware security analyzer
tani2shell/php2shell-labBlack-box pentest lab for the PHP2Shell engine memory-corruption family (CVE-2026-109618 / CVE-2026-109619, CVSS 9.8/9.2). Dual-flag verified attack…
taniungou/php2shell-labBlack-box pentest lab for the PHP2Shell engine memory-corruption family (CVE-2026-109618 / CVE-2026-109619, CVSS 9.8/9.2). Dual-flag verified attack…
vqkro/ddossnakeGo load and stress testing tool with L7 HTTP and L4 raw TCP/UDP modes, multi-threaded workers, live rate graph, and a Windows GUI plus cross-platform…
wiz-sec-public/githuntDemos for Black Hat Europe 2025's The Forensic Trail On GitHub: Hunting For Supply Chain Activity
kamalx06/xxeripperBlack-box XXE scanner detecting in-band, error-based, and blind out-of-band injection via statistical baselining, parser fingerprinting, and OOB…
alex66366/odpureBlack-box input-stage purification defense that neutralizes backdoor attacks on object detectors via corruption, diffusion reconstruction, and DBSCAN…
edwardzpeng/presentationsSlides and conference talks from security research covering Windows, virtualization, web, and blockchain exploit techniques, presented at Black Hat,…
offensive-hub/black-widowGUI based offensive penetration testing tool (Open Source)
robertmotr/zirconiumDLL-injectable internal game cheat for Plutonium BO2 zombies
googleprojectzero/jackalopeBinary, coverage-guided fuzzer for Windows, macOS, Linux and Android
portswigger/css-the-bomb-inside-your-inboxAll the materials for Gareth Heyes' Black Hat talk: CSS: the bomb inside your inbox.
onhexgroup/conferencesConference presentation slides
owasp/owasp-model-card-security-standardOpen standard for documenting security-relevant metadata of AI models, including training data provenance, PII risk, known vulnerabilities, and…
piratesshield/apiharvesterThe one shot API attacker tool - finds the API url from the given root simulate the automated attacks
cyber-note/cve-2026-34835-black-box-analysisA black-box (DAST) security analysis of CVE-2026-34835 focusing on external validation methodology, observable behavior, security impact, and…