Charlie Smith

KubeArmor. Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

h3spacex. Library of Exploiting Last Frame Synchronization (also know as Single Packet Attack) on HTTP/3 - Manipulated version of quic-go lib

PenScope. Passive recon & attack surface mapper — zero requests sent

LearningToSee. Jupyter Notebook

DeepZero. Find zero-days while you sleep. DeepZero is an automated vulnerability research framework that parses, decompiles, and analyzes thousands of Windows kernel drivers for exploitable IOCTLs natively using AI agents.

HTTP2-CONNECT-Tunnel. A HTTP2 CONNECT Tunnel

milvus. Milvus is a high-performance, cloud-native vector database built for scalable vector ANN search

betterleaks. Scan the world (for secrets)

yj_nearbyglasses. attempting to detect smart glasses nearby and warn you

CVE-2026-2441-PoC. HTML

AdNauseam. AdNauseam: Fight back against advertising surveillance

Ashwesker-CVE-2026-20045. CVE-2026-20045

Research_Successful_Errors. Clear and obvious name of the exploitation technique can create a false sense of familiarity, even if its true potential was never researched, the technique itself is never mentioned and payloads are limited to a couple of specific examples. This research focuses on two such techniques for Code Injection and SSTI.

mongobleed. JavaScript

compiler-explorer. Run compilers interactively from your web browser and interact with the assembly

awesome-tuis. List of projects that provide terminal user interfaces

TermiSand. A falling sand simulator in your terminal!

tcell. Tcell is an alternate terminal package, similar in some ways to termbox, but better in others.

poc_salesforce_lightning. Academic purposes only. Attack against Salesforce lightning with guest privilege.

CTFd. CTFs as you need them

ladybird. Truly independent web browser

evilginx3-phishlets. Phishlets for evilginx

smugchunks. A black-box scanner for HTTP request smuggling vulnerabilities caused by chunk parsing discrepancies.

bbot. The recursive internet scanner for hackers. 🧡

AI-Red-Teaming-Playground-Labs. AI Red Teaming playground labs to run AI Red Teaming trainings including infrastructure.

llama2.c64. Inference Llama 2 in several files of pure C but on a C64

ctf-katana. This repository aims to hold suggestions (and hopefully/eventually code) for CTF challenges. The "project" is nicknamed Katana.

CefSharp. .NET (WPF and Windows Forms) bindings for the Chromium Embedded Framework

cef. Chromium Embedded Framework (CEF). A simple framework for embedding Chromium-based browsers in other applications.

PHP_INCLUDE_TO_SHELL_CHAR_DICT. PHP

php_filter_chain_generator. Python

neural-networks-from-scratch. Neural Networks from Scratch in Python crafted for utilization as teaching resources in graduate courses (Deep Learning, Deep Learning for Computer Vision) delivered by Minh-Chien Trinh at Jeonbuk National University.

supertokens-core. Open source alternative to Auth0 / Firebase Auth / AWS Cognito

ysoserial. A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

BFScan. Tool for finding URLs, paths, secrets and generating raw HTTP requests and OpenApi specifications from config files and annotations used in JAR / WAR / APK applications.

wrapwrap. Generates a `php://filter` chain that adds a prefix and a suffix to the contents of a file.

gopl.io. Example programs from "The Go Programming Language"

agentic-radar. A security scanner for your LLM agentic workflows

spotube. 🎧 Open source music streaming app! Available for both desktop & mobile!

bencode-go. A Go language binding for encodeing and decoding data in the bencode format that is used by the BitTorrent peer-to-peer file sharing protocol.

fly-to-podman. Migrate from Docker to Podman.

twilio-security-scanner. Python

hotline. A modern remake of Hotline for macOS, iOS, and iPadOS.

noTunes. A simple macOS application that will prevent iTunes or Apple Music from launching.

httptap. View HTTP/HTTPS requests made by any Linux program

BruteShark. Network Analysis Tool

serverless-toolkit. CLI tool to develop, debug and deploy Twilio Functions

100-languages. Solving the first 100 Project Euler problems using 100 different programming languages!

oauth-in-action-code. Source code for OAuth 2 in Action

xss-payload-list. xss-payload-list

oauth-labs. oauth-labs: an intentionally vulnerable set of OAuth 2.0 labs for security training and learning

IIS_shortname_Scanner. an IIS shortname Scanner

IIS-ShortName-Scanner. latest version of scanners for IIS short filename (8.3) disclosure vulnerability

fuzzotron. A TCP/UDP based network daemon fuzzer

ffufwebparser. Parse FFUF results in GUI with option to sort based by response code , size , keyword

splitting-the-email-atom. HTML

h2spacex. HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy‌ + Exploit Timing Attacks

fuzz.txt. Potentially dangerous files

hate_crack. A tool for automating cracking methodologies through Hashcat from the TrustedSec team.

jollyexec. The Jolly Executioner - a simple command execution proxy

ballast. Keep your audio balance from drifting! OSX Status Bar App

gungnir. CT Log Scanner

bbscope. Scope aggregation tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

PlasmaPup. PlasmaPup is designed to help central and departmental IT personnel understand their exposures in Active Directory by showing which accounts have permissions to make changes within their OU(s) or modify group policy applying to thier OU(s).

jan. Jan is an open source alternative to ChatGPT that runs 100% offline on your computer.

netscout. OSINT tool that finds domains, subdomains, directories, endpoints and files for a given seed URL.

gourlex. Gourlex is a simple tool that can be used to extract URLs and paths from web pages.

Empire. Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

Mythic. A collaborative, multi-platform, red teaming framework

jsmug. A PoC code for JSON Smuggling technique to smuggle arbitrary files through JSON

http-request-smuggler. Java

client-side-prototype-pollution. Prototype Pollution and useful Script Gadgets

mallet. Mallet is an intercepting proxy for arbitrary protocols

hostapd-mana. SensePost's modified hostapd for wifi attacks.

ruler. A tool to abuse Exchange services

reGeorg. The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

CVE-2024-27198. Exploit for CVE-2024-27198 - TeamCity Server

audiostream. HTML

nomore403. 🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast. Precise. Effective.

hugo. The world’s fastest framework for building websites.

goreleaser. Release engineering, simplified

http-garden. Differential testing framework for HTTP implementations

bubbletea. A powerful little TUI framework 🏗

badssl.com. :lock: Memorable site for testing clients against bad SSL configs.

http2smugl. Go

cobra. A Commander for modern Go CLI interactions

h2csmuggler. HTTP Request Smuggling over HTTP/2 Cleartext (h2c)

nghttp2. nghttp2 - HTTP/2 C Library and tools

SSH-Snake. SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.

galah. Galah: An LLM-powered web honeypot.

100-go-mistakes. 📖 100 Go Mistakes and How to Avoid Them

curl-to-go. Convert curl commands to Go code in your browser

HTTP3ONSTEROIDS. HTTP3ONSTEROIDS - A research on CVE-2023-25950 where HAProxy's HTTP/3 implementation fails to block a malformed HTTP header field name.

crab. A community fork of a language named after a plant fungus. All of the memory-safe features you love, now with 100% less bureaucracy!

websocket-smuggle. Issues with WebSocket reverse proxying allowing to smuggle HTTP requests

t-reqs. Grammar-based HTTP/1 fuzzer with mutation ability

Marble. The CIA's Marble Framework is designed to allow for flexible and easy-to-use obfuscation when developing tools.

gowitness. 🔍 gowitness - a golang, web screenshot utility using Chrome Headless

qoraal-engine. Embedded state machine language with a just-in-time compiler for unparalleled speed and efficiency.

manifesto. The OpenTF Manifesto expresses concern over HashiCorp's switch of the Terraform license from open-source to the Business Source License (BSL) and calls for the tool's return to a truly open-source license.

aws-enumerator. The AWS Enumerator was created for service enumeration and info dumping for investigations of penetration testers during Black-Box testing. The tool is intended to speed up the process of Cloud review in case the security researcher compromised AWS Account Credentials.

tiscripts. Turbo Intruder Scripts

smuggler. Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

pwnhub. How GitHub Actions workflows can be hacked