Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …

腾讯云黑客松 - 智能渗透挑战赛

An overview of LLMs for cybersecurity.

Repository for sample controller. Complements sample-apiserver

IngressNightmare-PoC： (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, CVE-2025-1974) PoC ，One-click script 。 一键脚本

IngressNightmare POC. world first remote exploitation and with multi-advanced exploitation methods. allow on disk exploitation. CVE-2025-24514 - auth-url injection, CVE-2025-1097 - auth-tls-match-c…

This is a PoC code to exploit the IngressNightmare vulnerabilities (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974).

云原生安全资料库

Community curated list of templates for the nuclei engine to find security vulnerabilities.

🧡 Everything is RSSible

Exploit for the vulnerability CVE-2024-43044 in Jenkins

poc for CVE-2024-38063 (RCE in tcpip.sys)

Customizable Linux Persistence Tool for Security Research and Detection Engineering.

A resource containing all the tools each ransomware gangs uses

32-bit PoC for CVE-2024-6387 — mirror of the original 7etsuo/cve-2024-6387-poc

Execute ELF files without dropping them on disk

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.

notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)

记录安全方面的笔记/工具/漏洞合集

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

Falco Talon is a Response Engine for managing threats in your Kubernetes

Linux privilege escalation auditing tool

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

记录自己在云安全上的学习笔记等。

The latest SSH-honeypot codes

✨🔐 CNCF Fuzzers

Post-exploit a compromised etcd, gain persistence and remote shell to nodes.