Collection of legal threats against good faith Security Researchers; vulnerability disclosure gone wrong. A continuation of work started by @attritionorg
☆328Jul 13, 2026Updated last week
Alternatives and similar repositories for research-threats
Users that are interested in research-threats are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- x64 Windows package of the shellcode2exe tool☆14Nov 23, 2020Updated 5 years ago
- Collection of scripts that I created to make my life easier.☆12May 10, 2021Updated 5 years ago
- A standard allowing organizations to nominate security contact points and policies via DNS TXT records.☆35Jul 13, 2026Updated last week
- 🦊A cloudflare DNS over HTTPs resolver client library.☆12Jan 10, 2023Updated 3 years ago
- A list of edge cases that occur in bug bounty programs, conversations on how they should be handled. The goal is to standardise the way t…☆238Feb 1, 2022Updated 4 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Tools, data, and contact lists relevant to The disclose.io Project.☆325Jul 5, 2026Updated 3 weeks ago
- This repository contains a mindmap for different techniques for using Censys Search☆15Sep 17, 2025Updated 10 months ago
- Spring Framework RCE (Quick pentest notes)☆17Apr 7, 2022Updated 4 years ago
- d(ockerp)wn - a docker pwn tool manager☆156Jun 8, 2021Updated 5 years ago
- ☆23Mar 29, 2022Updated 4 years ago
- ☆452Oct 3, 2024Updated last year
- Open-source vulnerability disclosure policy templates.☆70Jul 8, 2026Updated 2 weeks ago
- #️⃣ 🕸️ 👤 HTTP Headers Hashing☆12Aug 27, 2023Updated 2 years ago
- ☆18Mar 21, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Hackers Don't Give A Shit☆16Feb 2, 2020Updated 6 years ago
- Checklist for pentests, handy commands for to remembers, and a few tools to work on here and there. Far from complete!☆26Jul 28, 2023Updated 2 years ago
- DIT is a DTLS MitM proxy implemented in Python 3. It can intercept, manipulate and suppress datagrams between two DTLS endpoints and supp…☆59Jan 28, 2022Updated 4 years ago
- ☆47Nov 13, 2021Updated 4 years ago
- ☆66Aug 25, 2021Updated 4 years ago
- Tools, scripts and tips useful during OSINT investigations and reconnaissance.☆13Jul 2, 2021Updated 5 years ago
- The current website at https://disclose.io.☆19Jul 19, 2026Updated last week
- Fetch the details of assets hosted on AWS.☆89Dec 4, 2023Updated 2 years ago
- Free Email Providers☆12Aug 15, 2023Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆49May 12, 2021Updated 5 years ago
- Recon tool for URLs discovery☆12Jun 19, 2024Updated 2 years ago
- WebSocket Connection Smuggler☆47Sep 30, 2022Updated 3 years ago
- DNSTake — A fast tool to check missing hosted DNS zones that can lead to subdomain takeover☆855Feb 13, 2023Updated 3 years ago
- This is a proof-of-concept of malicious software running inside of ModSecurity WAF.☆34Jul 24, 2025Updated last year
- This repository contains the tools we used in our research on the Google Titan M chip☆210Aug 22, 2022Updated 3 years ago
- Accompanying code for blog post "Mapping iOS Persistence Attack Surface using Corellium"☆11Jun 10, 2025Updated last year
- fundamental traits to describe an architecture in the yaxpeax project☆18Mar 1, 2025Updated last year
- A pre-DDoS security assessment tool☆119Jun 11, 2021Updated 5 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- JXA and swift code that can perform some macOS situational awareness without generating TCC prompts.☆40Apr 20, 2022Updated 4 years ago
- Script to pull newly-registered domains and check for similarity against a provided word list.☆13Aug 2, 2020Updated 5 years ago
- The application is a PoC that helps in identifying modern bankers, potentially malicious and remote controlling applications abusing Andr…☆45Jan 14, 2025Updated last year
- Take a word list and convert 1337 spellings back to normal☆12Nov 20, 2017Updated 8 years ago
- ☆1,200Sep 2, 2022Updated 3 years ago
- Custom Binary Ninja Themes☆12Nov 11, 2023Updated 2 years ago
- ☆13Jul 15, 2021Updated 5 years ago