Multi-architecture Linux privilege escalation toolkit with 24 pre-built and runtime-compilable exploits. Auto-detects kernel version, filters patched exploits, tries each until root.

Research code for the paper "The Trigger in the Haystack: Extracting and Reconstructing LLM Backdoor Triggers" https://arxiv.org/abs/2602.03085

For binary exploitation CTF

A practical Firebase pentest checklist covering Auth, Realtime database, Firestore, Storage, Remote Config, Functions, and IAM. Includes OpenFirebase commands and clear finding criteria per service

List of all local & free open-source voice-clone TTS models and music generation models.

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

An agentic skills framework & software development methodology that works.

GDB + bata24/gef for Linux kernel debugging on Apple Silicon. Docker-based setup for CTF kernel exploitation.

The AI Security Verification Standard (AISVS) focuses on providing developers, architects, and security professionals with a structured checklist to verify the security of AI-driven applications.

CLI proxy that reduces LLM token consumption by 60-90% on common dev commands. Single Rust binary, zero dependencies

Original Proof-of-Concepts for React2Shell CVE-2025-55182

Pre-auth RCE in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0.

Kernel building tutorials for Any device for newbies..! 🎉

This repository is a collection of JavaScript gadgets that can be used to bypass XSS mitigations such as Content Security Policy (CSP) and HTML sanitizers like DOMPurify.

Forked from fbongtrop/hbctool

Thai LLM evaluation NOT sponsored by Siang Pure Oil

One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

A collection of links related to Linux kernel security and exploitation

Course materials for Modern Binary Exploitation by RPISEC

ctf-writeups

A collection of links related to VMware escape exploits

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

Generative Agents: Interactive Simulacra of Human Behavior

Playing Pokemon Red with Reinforcement Learning

(Still exploring) My cryptography journey: A collection of notebooks covering different algorithms and concepts from cryptography

Google CTF

This project aims to compare and evaluate the telemetry of various EDR products.