Vulnerabilities Reported (2)
| Advisory | CVE | Severity | Date | Summary |
|---|---|---|---|---|
| GHSA-g747-7v24-2w4v | - | Medium | 2026年08月21日 | OAuth2 state parameter is not validated on callback, allowing authorization code injection |
| GHSA-qrx8-9hc6-jvqg | CVE-2026-32255 | High (8.6) | 2026年03月18日 | Unauthenticated SSRF in attachment download endpoint |
CVE Proof of Concepts (3)
| CVE | Description | ⭐ | 🍴 | 👁️ | 📥 |
|---|---|---|---|---|---|
| CVE-2025-55182 | This repository contains a POC of CVE-2025-55182, a critical (CVSS score 10.0) pre-authentication remote code execution vulnerability affecting React Server Components, also known as React2Shell. | 15 | 3 | 5733 | 1714 |
| CVE-2025-29927 | This repository contains a POC and an exploit script for CVE-2025-29927, a critical vulnerability in Next.js that allows attackers to bypass authorization checks implemented in middleware. | 8 | 3 | 2593 | 967 |
| CVE-2026-32255 | This repository contains a proof of concept (POC) for CVE-2026-32255, a high-severity Server-Side Request Forgery (SSRF) vulnerability in Kan, an open-source project management tool. | 2 | - | 1058 | 362 |
Projects (5)
| Project | Description | ⭐ | 🍴 | 👁️ | 📥 |
|---|---|---|---|---|---|
| oss-oopssec-store | Security training for the apps you actually ship. Open your browser and start hacking. | 42 | 52 | 6713 | 54494 |
| cyber-bot | Threat intelligence platform: RSS aggregation, NVD CVE tracking, ENISA EUVD, databreaches, ... | 7 | 1 | 261537 | 2151 |
| hate-crimes-map | This project aims to visualize hate crime data to bring visibility to crimes that are often invisible or normalized by society. | 3 | - | 156 | 577 |
| awesome-pentest-tools | Open-source offensive security tools, plus a vendor-agnostic AI agent that runs authorized pentest engagements using only tools from this list. | 3 | 2 | 37 | 258 |
| crack-hash | A fast, multi-threaded hash cracking tool written in Rust. This tool performs dictionary attacks against hashed passwords. | 2 | - | 82 | 62 |
OSS Contributions (21)
| Repository | Description | ⭐ | 🍴 |
|---|---|---|---|
| kanbn/kan | The open source Trello alternative. | 5590 | 462 |
| ThePorgs/Exegol | Fully featured and community-driven hacking environment | 3078 | 287 |
| beelzebub-labs/beelzebub | A secure low code deception runtime framework, leveraging AI for System Virtualization. | 2170 | 207 |
| OWASP/www-community | OWASP Community Pages are a place where OWASP can accept community contributions for security-related content. | 1409 | 843 |
| OWASP/www-project-vulnerable-web-applications-directory | The OWASP Vulnerable Web Applications Directory Project (VWAD) is a comprehensive and well maintained registry of all known vulnerable web applications currently available. | 94 | 52 |
| nilbuild/developer-roadmap | Interactive roadmaps, guides and other educational content to help developers grow in their careers. | 366538 | 44902 |
| mermaid-js/mermaid | Generation of diagrams like flowcharts or sequence diagrams from text in a similar manner as markdown | 90148 | 9235 |
| usebruno/bruno | Opensource IDE For Exploring and Testing API's (lightweight alternative to Postman/Insomnia) | 46816 | 2853 |
| enaqx/awesome-pentest | A collection of awesome penetration testing resources, tools and other shiny things | 27143 | 4940 |
| qazbnm456/awesome-web-security | 🐶 A curated list of Web Security materials and resources. | 13777 | 1816 |
| infoslack/awesome-web-hacking | A list of web application security | 7261 | 1360 |
| satnaing/astro-paper | A minimal, accessible and SEO-friendly Astro blog theme. | 5027 | 1095 |
| husnainfareed/awesome-ethical-hacking-resources | 😎 🔗 Awesome list about all kinds of resources for learning Ethical Hacking and Penetration Testing. | 3758 | 561 |
| lingdojo/kana-dojo | Aesthetic, minimalist platform for learning Japanese inspired by Duolingo and Monkeytype, built with Next.js and sponsored by Vercel. Beginner-friendly with plenty of good first issues - all contributions are welcome! | 3330 | 3218 |
| fabionoth/awesome-cyber-security | A collection of awesome software, libraries, documents, books, resources and cools stuffs about security. | 1941 | 268 |
| vavkamil/awesome-vulnerable-apps | Awesome Vulnerable Applications | 1480 | 226 |
| kaiiyer/awesome-vulnerable | A curated list of VULNERABLE APPS and SYSTEMS which can be used as PENETRATION TESTING PRACTICE LAB. | 1391 | 227 |
| okhosting/awesome-cyber-security | A curated list of cyber security resources and tools. | 731 | 119 |
| Grafikart/Grafikart.fr | Dépôt pour la nouvelle version de Grafikart.fr | 699 | 190 |
| noraj/rawsec-cybersecurity-inventory | An inventory of tools and resources about CyberSecurity that aims to help people to find everything related to CyberSecurity. | 345 | 75 |
| secnotes/awesome-cybersecurity | A collection of awesome github repositories about security | 81 | 10 |
TryHackMe Stats
| Global Rank | Top | Streak |
|---|---|---|
| #12777 | 1% | 755 days |
TryHackMe Badges (50)
- Networking Nerd — Completing the 'Network Fundamentals' module
- 7 Day Streak — Achieving a 7 day hacking streak
- Webbed — Understands how the world wide web works
- World Wide Web — Completing the 'How The Web Works' module
- cat linux.txt — Being competent in Linux
- 30 Day Streak — Hacking for 30 days solid
- OWASP Top 10 — Understanding every OWASP vulnerability
- Hash Cracker — Cracking all those hashes
- Metasploitable — Contains the knowledge to use Metasploit
- Blue — Hacking into Windows via EternalBlue
- Cyber Ready — Understanding impact of training on teams
- Sword Apprentice — Completing the SQLMap room
- Shield Apprentice — Completing the FlareVM room
- 90 Day Streak — Hacking for 90 days in a row
- Linux PrivEsc — Mastering Linux Privilege Escalation
- Pentesting Principles — Completing the 'Introduction to Pentesting' module
- Intro to Web Hacking — Completing the 'Introduction to Web Hacking' module
- Advent of Cyber 2024 — Completing Advent of Cyber 2024!
- Burp'ed — Completing the Burp Suite module
- 180 Day Streak — Hacking for 180 days in a row
- Authentication Striker — Used the Hammer to bypass authentication
- SQL Slayer — Conquered Advanced SQL Injection
- System Sniffer — Completed the File Path traversal room
- OhSINT — Completing the OhSINT room
- Client-Side Champ — Successfully exploited client-side vulnerabilities
- Introduction to Security Engineering — Completed the Security Engineer Intro room!
- Calculated Risk — _Completed the Risk Management room! _
- 3 Day Streak — Achieving a 3 day hacking streak
- Network and System Security — Finished the Auditing and Monitoring room!
- Software Security — _Completed the OWASP API Security Top 10 rooms! _
- 365 Day Streak — Hacking for 365 days in a row
- The Course Awakens — Finishing the first room in the DevSecOps path!
- Just have to deal with it — _Successfully managed a cyber crisis! _
- Raffle Royalty — Participating in Hack2Win 2025!
- /opt/m0th3r — Finishing Mother’s Secret!
- Skilled Navigator — Finishing the Eviction challenge!
- First Step into SOC — Explored emerging threats and SOC response
- SOC Apprentice — Explored how a SOC team operates from inside
- First alert closed — Closing your first alert
- First scenario completed — Completing your first scenario
- 100% true positive rate — Achieving 100% true positive rate in a scenario
- 500 Day Streak — Hacking for 500 days in a row
- Tooling Specialist — Adept in creating custom offensive tooling
- Advent of Cyber 2025 — Completing Advent of Cyber 2025!
- Model Compromise — Completed the LLM Attacks Module
- Session Held — Completing 4 weekly missions in a row!
- Security Awareness — Completing the cyber security awareness module
- Adversarial Defence Ops — Trained to Defend, Built to Learn.
- AI Odyssey — Taking part in the AI Odyssey event!
- 750 Day Streak — Hacking for 750 days in a row
TryHackMe Completed Rooms (351)
Certificates (124)
- Try Hack Me - Hacker Holidays — 2026-08
- Build your cybersecurity audit and control strategy — 2026-06
- Carry out a web penetration test — 2026-05
- Introduction to DevSecOps: Culture and Methodology — 2026-05
- Dive Into the World of Cyber Incident Detection and Response — 2026-04
- Protect your Connected Digital Systems by Following the 12 Best Practices from ANSSI — 2026-04
- Analyze and Manage IT Risks — 2026-03
- Everything You Need to Know About Computer Networks in Just a Few Hours — 2026-02
- Secure your Data with Cryptography — 2026-02
- Raise Cybersecurity Awareness Effectively — 2026-02
- Secure your Network with VPNs and Firewalls — 2026-02
- Conduct Your Cybersecurity Monitoring — 2026-02
- Discover the Basics of Digital Security — 2026-02
- Discover the World of Cybersecurity — 2026-02
- Try Hack Me - Advent of Cyber 2025 — 2025-12
- Try Hack Me - Security Engineer — 2025-09
- Try Hack Me - Web Fundamentals — 2025-02
- Try Hack Me - Jr Penetration Tester — 2025-01
- Try Hack Me - Advent of Cyber 2024 — 2024-12
- Try Hack Me - Complete Beginner — 2024-11
- Try Hack Me - Cyber Security 101 — 2024-11
- Try Hack Me - Introduction to Cyber Security — 2024-09
- Try Hack Me - Pre Security — 2024-08
- Ethical Hacking: Social Engineering — 2024-08
- OWASP Top 10 — 2023-11
- Security for Developers — 2023-11
- Ethical Hacking: the Complete Course — 2023-10
- Use ChatGPT to improve your productivity — 2023-05
- Ethereum and Solidity: The Complete Developer's Guide — 2023-03
- Discover the world of Information Systems — 2022-09
- Get started with Linux — 2022-07
- Simulate network architectures with GNS3 — 2022-05
- Design your TCP/IP network — 2022-05
- Draw up a functional specification — 2022-04
- Design a clickable interface — 2022-04
- Set up your front-end environment — 2022-04
- Discover the jobs of developer — 2022-04
- Develop your soft skills — 2022-04
- Use the Redux state manager to manage the state of your applications — 2022-04
- Use design patterns in JavaScript — 2022-04
- Learn how to use the command line in a terminal — 2022-04
- Manage code with Git and GitHub — 2022-03
- Create a complete React application — 2022-03
- Get started with React — 2022-01
- Manage your time efficiently — 2022-01
- Create responsive websites with Bootstrap 4 — 2021-12
- Create modern CSS animations — 2021-12
- Code an accessible website with HTML & CSS — 2021-11
- Test your Front End applications with JavaScript — 2021-11
- Debug your website interface — 2021-10
- Write the technical documentation for your project — 2021-10
- Test the interface of your site — 2021-10
- Create a web application with Vue.js — 2021-10
- Adopt REST APIs for your web projects — 2021-09
- Go full stack with Node.js, Express and MongoDB — 2021-08
- Write JavaScript for the web — 2021-07
- Design accessible web content — 2021-07
- Learn to program with JavaScript — 2021-07
- Simplify CSS with Sass — 2021-06
- Increase your traffic with natural referencing (SEO) — 2021-06
- Optimize the referencing of your site (SEO) by improving its technical performance — 2021-06
- Secure your web applications with OWASP — 2021-05
- Learn to learn — 2021-02
- The stages of the Mentor's life — 2021-02
- Learn about Python for data analysis — 2020-04
- Ultra-fast applications with Node.js — 2020-02
- Perfect your agile project management — 2019-02
- Understanding Bitcoin and the Blockchain — 2019-02
- Discover the cloud with Amazon Web Services — 2019-02
- Manage your project with a Scrum team — 2019-02
- Continue with Ruby on Rails — 2019-01
- Set up an information monitoring system — 2019-01
- Learn about agile project management — 2018-10
- Get started with Ruby on Rails — 2018-10
- Discover the agility posture — 2018-10
- Put the UX approach into practice — 2018-09
- Discover the world of cybersecurity_0 — 2018-09
- Start programming with Ruby — 2018-08
- React and Redux in practice — 2018-06
- Really understand Javascript — 2018-05
- Build a web application with React.js — 2018-04
- UX design: discover the basics! — 2018-01
- Learn about Design Thinking — 2018-01
- Speak in public — 2017-12
- Make a database with UML — 2017-11
- Use REST APIs in your web projects — 2017-10
- Manage your IT project easily! — 2017-09
- Start software analysis with UML — 2017-09
- Improve your skills in Python — 2017-08
- Discover how the algorithms work — 2017-08
- Discover object-oriented programming with Python — 2017-08
- Animate a Twitter community — 2017-08
- Start your project with Python — 2017-07
- Launch your freelance activity — 2017-06
- Succeed in your emailing campaign with MailChimp — 2017-05
- Digital Marketing Fundamentals (Digital Active) — 2017-03
- Develop your website with the Symfony framework — 2016-12
- Manage and pilot a multimedia project — 2016-11
- Organize your multimedia project — 2016-11
- Draw up the specifications for a digital project — 2016-10
- Simplify your JavaScript development with jQuery — 2016-09
- Introduction to jQuery — 2016-08
- Big Data: Intelligence, Products and Markets in the Age of Big Analytics — 2016-07
- Become an auto-entrepreneur — 2016-07
- Build modern and beautiful websites with WordPress — 2016-06
- Create your professional website with WordPress — 2016-06
- Create interactive web pages with JavaScript — 2016-06
- Manage your databases with MySQL — 2016-06
- Big Data is transforming my life and the lives of businesses — 2016-06
- Learn how to frame a multimedia project — 2016-05
- Create your first website with WordPress — 2016-04
- Design your website with PHP and MySQL — 2016-04
- Understanding Big Data through movies — 2016-03
- Discover the basics of project management — 2016-03
- Learn how to surf the Internet safely — 2016-03
- Control the use of your personal data — 2016-03
- Take back control with Linux! — 2016-03
- Web Integrator — 2016-03
- Get started with Bootstrap — 2016-03
- Manage your code with Git and GitHub — 2016-03
- Discover CMS solutions — 2016-02
- Learn to code with JavaScript — 2016-02
- Understanding the Web — 2016-02
- Learn how to create your website with HTML5 and CSS3 — 2016-02