Elite588 / Hacker
This repository is maintained by Hex Core and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org
OmriBaso / SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit
Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path traversal, certificate verification bypass, and DLL hijacking to achieve SYSTEM-level code execution.
DeathShotXD / 0xM0nCrush
Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.
scottalt / senior-securityengineer-cybersecuritybookmarks
A senior security engineer's actual browser bookmarks. 40+ curated cybersecurity resources for recon, OSINT, exploitation, privilege escalation, and malware analysis.
0xaled / Vipere
BOF exploiting the Visual Studio Installer Elevation Service for SYSTEM LPE and persistence via AppDomainManager hijacking, with native ETW evasion. For Cobalt Strike & Adaptix.
NanoTurtle1145 / root-my-s24
Using CVE-2026-43499 to root your Galaxy S24 Series(SM-S92X0 ,(China / Hong Kong SAR / Taiwan))
K4N3CO / Lab-RATS-v1.6
Lab-RATS is a powerful and lightweight Android Remote Administration Tool full of features that enables remote monitoring, management and interaction through a sleek web interface and supports the newest modern Android releases.
armourinfosec / Secure-PHP-Development
Secure PHP Development — lab-driven study notes: modern PHP 8.2/8.3 through a full OWASP-mapped catalogue of PHP vulnerabilities with exploit-then-fix labs. CC BY 4.0.
abobikabobikycov-png / Xeno-Protocol-Core
Xeno 1.3.60 Config Manager 2026: Best Advanced Automation Toolkit for GitHub
aayushraj5480-svg / quantum-roblox-core
Roblox Quantum Script Hub 2026: Best Open-Source Exploit Framework for Developers
Aditya369-tech / STACK-Forge-Ops
STACK-2026 Developer Guide: Build Modern Apps Step by Step in 2026
hari99code / Roblox-Guardian-Watch
Roblox Safety Utilities 2026: Open Source Scripts for Fair Play and Exploit Defense
ZeroDayEvil / CVE-2026-20817
🛡️ Official AI Security Tool module for CVE-2026-20817 (Windows Error Reporting WER ALPC Local Privilege Escalation PoC).
cli0xfa / simple-krw-vuln
Windows 内核任意内存读写漏洞收集仓库，收录简单、稳定、可编译复现的 Exploit（权限提升 / 终止安全软件）
ochynn-diann / Any-Item-Forge
Best Roblox Studio Game Building Guide 2026: Any Item ESP Script Tutorials
Mo271-del / BloxAgent-Studio-Bridge
BloxAgent 2026: AI-Powered Luau Reverse Engineering and Roblox Script Automation Framework
mlungisiduiker-cloud / rbx-console-lite-shell
Roblox Console Exploit Development Kit 2026
erenlertakvimi-cpu / rbx-remote-guardrail
Roblox RemoteEvent Security Protocol Guide 2026: Best Practices and Anti-Exploit Standards
nadun2009 / Roblox-Cinematic-Orbit-Camera-Studio
Roblox Cinematic Freecam & Multi-Target Orbit Studio 2026
DeathShotXD / Comment2Shell
Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker
Boreas37 / CVE-2026-64638-PoC-XSS2Shell-
XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template
akilkhan24-netizen / Crossy-Road-Engine
Crossy Road Hack C#: Top 2026 Game Mod Framework Ideas
miguel2004-cd / Big-Walk-Enhancer-Speed-Phantom-Suite
Big Walk Trainer Speed Hack and Ghost Mode Guide 2026 for Windows 10/11
brendanraoult / external-process-bridge
ExternalProcessKit 2026: Ultimate Framework for Win32 Process Interaction
kusaiyo14235-del / Big-Walk-Companion-Framework
Big Walk Utility 2026: Pro Island Explorer Mod Framework and Gameplay Toolkit
paglajoker809-prog / Big-Walk-Performance-Tuner-Pro-Motion-Overrides
Best Big Walk Speed Trainer & Ghost Mode Tool 2026: 10+ Pro Gameplay Enhancements
irfanaw / nightfall-cpvp-enhancements
Ultimate BlackOut CPVP Plugin Guide 2026: Advanced Meteor Client Features
rajrohit765 / crash-pattern-analyzer
Roobet Crash Pattern Analyzer & Simulated Strategy Guide 2026
alt8cio-source / tarkov-stash-replication-utility
Tarkov Item Duplication Exploit 2026: Dupe Any Item in 30 Seconds with FIR Status
selim5414 / process-orchestrator-win32
Win32 Process Automation Framework 2026: Control External Applications with Precision
pcramos841-ai / Big-Walk-Island-Atlas
Big Walk Island Explorer Mastery Suite 2026 – Advanced Tools & Mods Guide
Joyboy3d2y / Blaze-Signal-Forge
Best Selenium Sports Betting Bot for Automated Wagers in 2026
Kabupe / Crossy-Road-Eternal
Ultimate Crossy Road Hack Tool 2026 – Unlimited Coins & God Mode
snothin / GhostSam
Samsung temp root tool (until reboot) — Ghostlock / dirtyfrag exploit chains + manager app.
combeng6th / DirtyInit
One-touch, universal root for Samsung devices as u:r:init:s0
edisnord / relapse-y2jb
Relapse exploit ported to Y2JB.
jedharveycambel18-arch / gecko-tcp-bridge
Best Wii U TCP Gecko Homebrew Modding Engine Guide 2026
Razikatefo / Roobet-Crash-Lab
Roobet Crash Predictor Strategy Simulator 2026: Demo Round Testing Guide
bubblegum247 / Blaze-Spectra-Automaton
Best Open-Source Blaze Bet Automation Script with Python Selenium 2026
Snizi / CVE-2026-18963-Exploit
Exploit for KeyCloak CVE-2026-18963
dinosn / security-research-orchestrator-prompt
High-assurance, artifact-agnostic prompt for authorized security labs, exploit-chain research, PoC validation, and evidence-led reporting.
xiabai2008 / ruoyi-scan
RuoYi (若依) dedicated vulnerability scanner: plugin architecture, three-state verdict, WAF bypass, exploit chains, AI POC generation, nuclei compatible. 若依专项漏洞扫描器
guneykabel / cve-2026-85706
Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions: 18.7–19.1.7; 19.2.0–19.2.5; 19.3.0–19.3.1
DeathShotXD / 0xCr0ssCrush
Windows BYOVD research on DCRCVDrv.sys and Alinubx.sys, reverse engineering their kernel primitives, IOCTL surfaces, and detection opportunities.
lem0nSec / SgrmFault
Process Impairment Exploit Chain.
pranjalm37 / race-condition-exploiter
TOCTOU race condition research toolkit: vulnerable/patched samples, a CLI race harness, an AST-based scanner, and a live demo
iktok90-design / ai-smart-contract-auditor
AuditSentry — AI-powered smart contract security auditor for Claude Code. Automated vulnerability detection, exploit PoCs, mainnet-fork simulation, and professional audit reports for Solidity & Vyper across all EVM chains.
imbas007 / POC-CVE-2026-60206
cve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security
armourinfosec / Offensive-File-Transfer-Techniques
Offensive File Transfer Techniques — hands-on study notes on moving files to and from a target during an engagement across every channel: HTTP/SMB/FTP/TFTP/WebDAV, netcat/socat, scp/rsync, LOLBAS/GTFOBins, base64 no-egress, Meterpreter, plus detection. CC BY 4.0.
armourinfosec / Offensive-Windows-Privilege-Escalation
Offensive Windows Privilege Escalation — hands-on study notes: enumeration & methodology, service/scheduled-task misconfigs, UAC bypass, token-privilege abuse, the potato family, kernel exploits, and credential mining. Each technique with detection & defenses. CC BY 4.0.
newbe3e / Pwn2Own-Automotive-2026-Alpine-iLX-F511-0-Click-RCE-Exploit-Writeup
This is a write up of the exploit I developed for the Pwn2Own Automotive 2026 competition.
SagarBiswas-MultiHAT / The-BlackHAT-roadmap
The complete hacking & penetration testing roadmap. From beginner to elite. 44,982 lines, 150+ Diagram across the roadmap: OPSEC, web security, Active Directory, binary exploitation, EDR evasion, and 0-day research. 300+ tools, 200+ MITRE techniques, C & Rust payloads, lab guides, books, courses, blogs, practice platforms, and AI security resources
armourinfosec / Offensive-Linux-Privilege-Escalation
Offensive Linux Privilege Escalation — hands-on study notes: enumeration, sudo/SUID/capabilities, cron & systemd timers, kernel LPEs (DirtyPipe/OverlayFS/PwnKit), container & namespace escapes, and credential mining. Each technique with detection & defenses. CC BY 4.0.
X1NONs / C-for-exploit-development
The Exploit Development Trilogy. A free, zero-to-hero guide covering C programming, reverse engineering, and modern memory corruption. Master the stack, heap, ROP, and kernel exploitation.
tc4dy / CVE-2026-54121-PoC-Exploit
CVE-2026-54121 - CertiGhost AD CS Multi-Exploit Framework | Rogue DC + LDAP spoofing, certificate abuse, PKINIT hash extraction, auto DCSync. Safe Checker + full exploit, multi-threaded mass scan, Shodan integration, JSON/CSV/JSONL output. CVSS 8.8 High. Use Ethically, Stay Legal :v
nesfit / ECI39
N3: Exploiting and securing communication on the Internet
R0rt1z2 / amonet-koboreru
Preloader exploit for some MediaTek based Amazon devices
security-attack / RingKiller
RingKiller — BYOD PoC for vulnerable driver DCRCVDrv.sys. Abuses IOCTL 0x2205C0 to kill arbitrary processes from ring 0 via ZwTerminateProcess. EDR/AV termination primitive. Lab only.
ZeroDayEvil / CVE-2026-31431
🛡️ Official AI Security Tool module for CVE-2026-31431 ("Copy Fail" / Linux algif_aead page-cache scratch-write LPE Exploit & Detector).
kaffeindecaf / W0lfSword
iOS kernel exploit toolkit | DarkSword R/W | SSV Bypass | XPF offset verification