exploit-development

Community curated list of templates for the nuclei engine to find security vulnerabilities.

VerSprite Security Research

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Web based binary analysis

This repository contains multiple exploits I have written for various CVEs and CTFs

Cryptanalysis of the DAO exploit & Multi-Stage Attack

Various documentation and write-ups for challenges and research

CVE-2026-102282: Local Privilege Escalation via SUID/SGID preservation during archive extraction

A curated archive of browser exploitation CTF challenges, initially focused on V8/d8, documenting bugs, exploitation primitives, techniques, and writeups.

A malicious DNS server for executing DNS Rebinding attacks on the fly. whonow lets you specify DNS responses and rebind rules dynamically using domain requests themselves.

Verdex 是一套证据优先的本地安全研究工具集:源码审计、逆向、pwn、web 侦察与攻防辅助,并通过 MCP 让大模型(如 DeepSeek、Claude Code)自主编排这些能力——不是一张静态工具台,而是一个大模型主导的分析/取证/验证链(全程只读分析、只生成文本,不执行目标、不发起网络请求)。

Exploit Index provides a searchable, version-wise database of High and Critical CVEs across major enterprise products, with Proof of Concept (PoC) exploit links and CISA Known Exploited Vulnerability (KEV) tracking, for security researchers.

V8 TurboFan CheckMaps type-confusion research and compressed-heap R/W exploit notes for CVE-2026-78938.

Educational standalone JavaScript implementation of the public exploit for CVE-2016-9079 (Firefox Use-After-Free), adapted from the original Exploit-DB/Metasploit module.

Tools and resources for red teaming, Active Directory, reverse engineering, and exploit development

Infinite Blackboard：PoC / 内核 LPE 代码教学画布，项目制导入、Agent 逐行讲解、攻击链与宏查询。

Browser-based frontend to gdb (gnu debugger). Add breakpoints, view the stack, visualize data structures, and more in C, C++, Go, Rust, and Fortran. Run gdbgui from the terminal and a new tab will open in your browser.