Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code

Open-source vulnerability disclosure and bug bounty program database

Historical Windows temporal memory-state research artifact for studying time-bound memory observations, validation limits, and defensive visibility.

Proof-of-Concept exploits for CVEs found by the team at Rhino Security Labs

HTTP Request Smuggling over HTTP/2 Cleartext (h2c)

Hacker, ready for more of our story ! 🚀

Fuzz Introspector -- introspect, extend and optimise fuzzers

KeyForge3D is an app that turns a photo of a key into a 3D-printable STL file. Ideal for locksmiths and hobbyists, it analyzes the key's bitting pattern using image processing and generates an accurate 3D model for quick replication.

Open-source Claude Code skills, agents, and slash commands for AI-powered penetration testing, bug bounty hunting, and security research

Hardware hacker’s flying probe automation stack for agent-driven target discovery, microscope mapping, safety-monitored CNC motion, probe review, and controlled pin probing.

📡🐧 Linux kernel syscall implementation tracker

Provide AI agents with full Tor network access and dark web data through a zero-config OpenClaw skill or standalone tool.

使用skill让 AI Agent 像安全分析师一样分析恶意样本 | AI Agent skill for automated malware analysis using IDA Pro

Canary Detection

MATE is a suite of tools for interactive program analysis with a focus on hunting for bugs in C and C++ code using Code Property Graphs.

Injectra is a Python-based tool for injecting custom payloads into various file types using their magic numbers. It supports file types like zip, rar, docx, jpg, and more, allowing for customizable payloads. It ensures seamless payload injection while maintaining the integrity of the original file.

Remove invisible AI watermarks (SynthID, StableSignature, TreeRing) and strip AI metadata from images. Open-source CLI & Python toolkit.

Python/Shodan tool for dumping exposed memcached server contents into local text files.

A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.

Analysis of Cloudflare anti-bot cookie flow (cf_bm / cf_clearance) from a defensive perspective.