| Project | Description | Tech | Stars |
|---|---|---|---|
| OopsSec Store | Deliberately vulnerable e-commerce application designed for security training and CTF challenges. Features documented vulnerabilities and educational flags. Run npx create-oss-store, open your browser, and start hunting flags! |
Web Security, CTF | |
| CVE-2025-55182 POC | Proof of concept for critical pre-authentication RCE in React Server Components (CVSS 10.0). | Vulnerability Research | |
| CVE-2025-29927 POC | Demonstrates authorization bypass vulnerability in Next.js middleware-based authentication. | Vulnerability Research | |
| Hash Cracker | Multi-threaded dictionary attack tool optimized for performance using Rust's concurrency features. | Rust, Cryptography | |
| Hate Crimes Map | Data visualization platform mapping hate crime statistics from public datasets. | TypeScript, Data Visualization | |
| Cyber Hub | Cybersecurity intelligence platform integrating RSS feeds for security news aggregation, NVD API for CVE tracking, and ENISA EUVD. | TypeScript, Security Intelligence |
Pinned Loading
-
oss-oopssec-store
oss-oopssec-store PublicRun `npx create-oss-store`, open your browser, and start hunting flags. Deliberately vulnerable Next.js e-commerce for web security training and CTF use.
-
poc-cve-2025-55182
poc-cve-2025-55182 PublicThis repository contains a POC of CVE-2025-55182, a critical (CVSS score 10.0) pre-authentication remote code execution vulnerability affecting React Server Components, also known as React2Shell.
-
crack-hash
crack-hash PublicA fast, multi-threaded hash cracking tool written in Rust. This tool performs dictionary attacks against hashed passwords.
Rust 2
-
hate-crimes-map
hate-crimes-map PublicThis project aims to visualize hate crime data to bring visibility to crimes that are often invisible or normalized by society.
TypeScript 3
-
poc-cve-2025-29927
poc-cve-2025-29927 PublicThis repository contains a proof of concept (POC) and an exploit script for CVE-2025-29927, a critical vulnerability in Next.js that allows attackers to bypass authorization checks implemented in m…
If the problem persists, check the GitHub status page or contact support.


