KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

Public open-source code of malware Stuxnet (aka MyRTUs).

Find zero-days while you sleep. DeepZero is an automated vulnerability research framework that parses, decompiles, and analyzes thousands of Windows kernel drivers for exploitable IOCTLs natively using AI agents.

Lyrie.ai — The world's first autonomous AI cybersecurity agent. Built by OTT Cybersecurity LLC.

Nginx 18.1 04/09/22 zero-day repo

CVE-2025-31200 is a zero-day, zero-click RCE in iOS CoreAudio’s AudioConverterService, triggered by a malicious audio file via iMessage/SMS. Exploitation bypassed Blastdoor, enabled kernel escalation (CVE-2025-31201), and allowed token theft until patched in iOS 18.4.1 (Apr 16, 2025).

Nuclei scripts created by @rxerium for zero days / actively exploited vulnerabilities.

Stuxnet extracted binaries by reversing & Stuxnet Rootkit Analysis

Curating Falco rules with MITRE ATT&CK Matrix

Independent OSINT CTI archive (TLP:GREEN): supply-chain, zero-day, DPRK/APT, AI/LLM threats, Web3, and Korea breach/policy reports. Multilingual KR/EN/JP/ZH. By Dennis Kim.

Advanced WinRAR Path Traversal Exploit Tool for CVE-2025-8088

Latest ios RCE Vulnerability disclosed by Google Security Researcher

Discord client zero-click RCE

Red-team tool to hook libc read syscall with a buffer overflow vulnerability.

CVE-2024-52940 - A zero-day vulnerability in AnyDesk's "Allow Direct Connections" feature, discovered and registered by Ebrahim Shafiei (EbraSha), exposing public and private IP addresses. For details, visit the NVD, Tenable, or MITRE pages.

Detection for CVE-2025-61882 & CVE-2025-61884

How to develop your own zero day vulnerabilities for iOS

CVE-2025-8088-BUILDER

C++ malware specifically built to extract Discord authentication tokens and personally identifying information.

Log4Shell Zero-Day Exploit Proof of Concept