Starred repositories
Proof of concept exploit code for CVE-2026-93680
Claude Code and Codex skill for finding potentially vulnerable Brotli copies and guiding updates for CVE-2026-111497.
Reproducible local Brotli decoder proof for CVE-2026-111497 with a self-checking tuned RCE harness
A stealthy process injection PoC combining Thread Name-Calling for payload delivery with Waiting Thread Hijacking for execution, with zero cross-process writes.
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes …
Workshop materials for “Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel” presented at DEF CON 34 and BSidesLV 2026. Covers malware development, EDR Architecture, EDR evasio…
List of Awesome Red Team / Red Teaming Resources This list is for anyone wishing to learn about Red Teaming but do not have a starting point.
Personal Notes and scripts for Active Directory Pnetesting
The community's most comprehensive, continuously-updated index of research on Large Language Models for software vulnerability detection — papers across function-level, repository-level, agentic, a…
Unlocking qualcomm bootloader via gbl exploit.
A list of all Active Directory machines from HackTheBox
CVE-2025-38001: Linux HFSC Eltree Use-After-Free - Debian 12 PoC
Novel Windows process injection: assembles existing open handles (process & thread), natural RWX regions, and special user APC (NtQueueApcThreadEx2) for stealthy execution. Minimal permissions, no …
Security research tool for detecting and testing CVE-2025-63888 (ThinkPHP 5.0.24 File Inclusion RCE vulnerability)
Bypasses Windows 11 installation and update restrictions and optionally performs a Windows Update reset.
A Playground for Firmware development for RTL8372/RTL8373 based 2.5GBit Switches
Script to detect CVE-2025-20393 for Cisco Secure Email Gateway And Cisco Secure Email and Web Manager
A Vehicle Control Unit for Electric Vehicle Conversion Projects based on an STM32F107. Software based on the Openinverter Project.
GNU IFUNC is the real culprit behind CVE-2024-3094
Gmail id brut force attack Gmail id hack tools (use : kali linux and trmoux)
list of awesome platforms, tools, and resources run for LLMs locally
Proof of concept for CVE-2025-13780