REAP - Prompts for you to use REA (Reverse Engineer Anything), get the most out of it, and clone or break down any program

High fidelity detection mechanism for node2shell (CVE-2026-111497)

Claude Code and Codex skill for finding potentially vulnerable Brotli copies and guiding updates for CVE-2026-111497.

Reproducible local Brotli decoder proof for CVE-2026-111497 with a self-checking tuned RCE harness

CVE-2026-111497 — Node.js Brotli Decoder OOB Write: Deep Analysis & Structural Unreachability Proof. MLEN_MAX = BLOCK_SIZE_CAP = 2^24 makes RCE structurally unreachable.

Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM

ArtCraft is an intentional crafting engine for artists, designers, and filmmakers

PhotoCraft: An open-source, photo editor written by scratch in pure Rust

A native Mach-O iOS/macOS port of Mario Kart 8 Deluxe, with LAN, online and wireless multiplayer

A curated collection of REA and AI-assisted reverse engineering cases, projects, and ideas. Updated every four hours.

API Pentesting Tools are specialized security tools used to test and analyze the security of Application Programming Interfaces (APIs).

Graphical interface for PortEx, a Portable Executable and Malware Analysis Library

WebKit jailbreak research for PlayStation 5 firmware 14.10

A simple GUI wrapper to automate the conversion of extracted PS5 pkg files to a native windows executable using Relinker from AnyPS5

AI turns documents or topics into real, native PowerPoint decks—with native shapes, transitions and animations, data-backed charts and tables on demand, audio narration from speaker notes, and supp…

A WiFi security auditing software

CVE-85884 POC

This is a write up of the exploit I developed for the Pwn2Own Automotive 2026 competition.

CVE-2026-76268 PoC: Splunk Enterprise SHC Patroni REST unauth RCE — PATCH /config archive_command + POST /restart. Check + mass exploit, OOB POCBIT-76268-OK, CVSS 9.8. https://pocbit.org/pocs/cve-2…

CVE-2026-91737 Chrome renderer RCE PoC (PDFium)

CVE-2026-102489 exploit in golang

A one-page reference for AI risk, built to widen the conversation before formal assessment. Organized by who owns the risk, with every factor traced to a source. Poster, workbook, CSV, and an AI-re…

ARTEX 한국어판 ·AI 기반 침해사고 대응 기능 추가 (upstream: Autumn-27/ARTEX, AGPL-3.0)

CVE-2026-107806 — nginx-ui 2.3.8–2.4.x auth RCE via forged backup restore (TestConfigCmd). PoCbit PoC: GET /api/backup, tamper app.ini, POST /api/restore, POST /api/nginx/test. check/exploit, batch…