BrowserBox
browserbox/browserbox💚🇺🇸🗽Secure remote browsing anywhere, any way you like it.
cloud-securitydefensive-toolsnetwork-security+3
3.9k
browserbox/browserbox💚🇺🇸🗽Secure remote browsing anywhere, any way you like it.
firefart/stunnerTest and exploit STUN/TURN servers for misconfigurations, enabling internal network pivoting via SOCKS proxy, memory leak attacks, and internal port…
mandiant/vulnerability-disclosuresCurated repository of vulnerability disclosures from Mandiant, including CVEs discovered through internal research, red team assessments, and wild…
madfxr/cve-2024-26581-checker[CVE-2024-26581] Vulnerability Checker for BGN Internal
rat5ak/cve-2026-66804-crossdevice-service-eopCVE-2026-66804 Windows Cross Device virtual camera EoP - private internal research repository
boreas37/cve-2026-33267-pocCVE-2026-33267 — Apache Traffic Server @ header internal-metadata spoof (CVSS 10.0). Verified: @ headers leak to plugins on 10.1.2, stripped on 10.1.4
flowerwitch/cve-2026-59774_dockerDockerized reproduction of CVE-2026-59774 for Gitea; demonstrates path traversal in go-org markup include to read arbitrary files and escalate to RCE…
kalhoralireza/cve-2026-17532Seraphinite Accelerator <= 2.29.18 - Reflected Cross-Site Scripting PoC
george0papasotiriou/cve-2026-11106-dns-zone-transfer-axfr-information-disclosureProof-of-concept for CVE-2026-11106 exploiting unrestricted DNS AXFR zone transfers to enumerate domain records, expose internal hosts, and leak…
george0papasotiriou/cve-2026-2020-ssrf-via-url-parser-differential
george0papasotiriou/cve-2026-1010-websocket-connection-smuggling-via-malformed-upgrade-header
elttam/publicationsOffensive security research hub aggregating original vulnerability advisories, CVE proof-of-concept exploits, conference talks, and internal tooling…
vikasudasi/exfil-scanScan LLM outputs and AI-generated content for data exfiltration signals (EchoLeak, CVE-2025-32711) before they reach users or downstream systems
amnestytech/inside-pegasusA curated set of NSO Group internal documents, product materials and sworn testimony that entered the public record in WhatsApp Inc. and Meta…
4qu4r1um/tugtainer-1.30.2-cve-2026-55494-and-cve-2026-62308-to-rceA combination of CVE-2026-55494 and CVE-2026-62308 to get root privilege RCE in tugtainer
c0gnit00/cve-2022-46364Proof-of-concept exploit for CVE-2022-46364, an Apache CXF SSRF vulnerability enabling arbitrary file reads and internal network probing via crafted…
cyberexpert111/blind-ssrf-to-remote-code-execution-shellshock-professional-bug-bounty-reportThis repository contains a professional bug bounty report demonstrating the successful exploitation of a Blind SSRF vulnerability that reached an…
k3ystr0k3r/cve-2012-1823CVE-2012-1823 - PHP CGI Argument Injection Remote Code Execution (RCE)