Topics / #vulnerability-research

Vulnerability-research projects on GitHub

Research into software vulnerabilities, exploits, and proof-of-concept code

As of , the most-starred Vulnerability-research projects on GitHub are h4cker (29.8K stars), Claude-Red (7.6K stars) and dirtyfrag (5.1K stars). GitHub.Locker tracks 7 Vulnerability-research repositories with 45.5K stars combined. The fastest-growing on October 16 was Claude-Red, with +21 stars in a day.

7Projects
45.5KStars in total
+59Stars in a day
Browse in the catalog →github.com/topics/vulnerability-research ↗

Hot right now

Most stars gained in a day · Oct 16

+21

Claude-Red

SnailSploit/Claude-Red · ★ 7.6K

claude-red is a curated library of offensive security skills for the Claude Skills system: structured SKILL.md files that prime Claude with expert-level methodology for one attack surface each, from SQLi to shellcode.

+17

h4cker

The-Art-of-Hacking/h4cker · ★ 29.8K

A curated collection of thousands of cybersecurity resources — references, scripts, tools, code, labs, and training material — maintained by Omar Santos as a companion to his books, video courses, and live training.

+12

dirtyfrag

V4bel/dirtyfrag · ★ 5.1K

Dirty Frag is a proof-of-concept Linux kernel local privilege escalation exploit that chains two page-cache write vulnerabilities (CVE-2026-43284 and CVE-2026-43500) to obtain root on major Linux distributions.

+4

skitter-creek-bath-salts

xoreaxeaxeax/skitter-creek-bath-salts · ★ 2.1K

A security research project that shows how to unlock protected regions on an AMD CPU — the Platform Security Processor, System Management Mode, C6 DRAM, and CPU microcode — by scrambling the DRAM controller's physical-to-DRAM address translation.

The all-time top

7 projects · by stars

  1. #1 · The-Art-of-Hacking/h4cker

    h4cker

    A curated collection of thousands of cybersecurity resources — references, scripts, tools, code, labs, and training material — maintained by Omar Santos as a companion to his books, video courses, and live training.

    29.8K
  2. #2 · SnailSploit/Claude-Red

    Claude-Red

    claude-red is a curated library of offensive security skills for the Claude Skills system: structured SKILL.md files that prime Claude with expert-level methodology for one attack surface each, from SQLi to shellcode.

    7.6K
  3. #3 · V4bel/dirtyfrag

    dirtyfrag

    Dirty Frag is a proof-of-concept Linux kernel local privilege escalation exploit that chains two page-cache write vulnerabilities (CVE-2026-43284 and CVE-2026-43500) to obtain root on major Linux distributions.

    5.1K
  1. 4

    skitter-creek-bath-salts

    2.1Kxoreaxeaxeax/skitter-creek-bath-salts · C

    A security research project that shows how to unlock protected regions on an AMD CPU — the Platform Security Processor, System Management Mode, C6 DRAM, and CPU microcode — by scrambling the DRAM controller's physical-to-DRAM address translation.

  2. 5

    bug-bounty-hunting-prompts

    621mdpsec/bug-bounty-hunting-prompts

    A pack of reusable prompt files for running a structured, evidence-first bug bounty hunting workflow with an LLM agent, covering recon through triage and escalation.

  3. 6

    ablation

    214Ablation-Tool/ablation · Python

    Ablation is a reverse engineering framework that provides the same core disassembly, decompilation, and binary analysis capabilities as industry tools like Ghidra, IDA Pro, and Binary Ninja, and it's built to be driven by an AI coding agent.

  4. 7

    NSNFSSSFSFN

    103ucsd-hacc/NSNFSSSFSFN · Python

    This repository contains the code accompanying the paper (eprint 2026/2131) implementing a variant of the number field sieve that lets an attacker with temporary access to a raw RSA signing oracle permanently forge signatures or decrypt ciphertexts, without ever factoring the public modulus N.

Often tagged together