# ZeroHack

> ZeroHack (ZeroHackOrg) — open-source cybersecurity, threat intelligence, detection engineering and security research. Home of the ZeroHack CVE intelligence dataset and a suite of AI/LLM security tools.

ZeroHack is an enterprise cybersecurity community and research group. It publishes open threat intelligence, detection rules, curated security lists and open-core security tooling, and operates the ZeroHack platform and Academy at https://zerohack.org. Repositories are maintained under the GitHub account ZeroHackOrg.

- **Organization:** ZeroHack (GitHub: ZeroHackOrg)
- **Website:** https://zerohack.org
- **GitHub:** https://github.com/ZeroHackOrg
- **Contact:** community@zerohack.org
- **Last reviewed:** 2026-11-11

## Flagship projects

- [camera-hacking](https://github.com/ZeroHackOrg/camera-hacking): Red/blue team IP camera & RTSP field guide — recon, default credentials, path audit, CVE-2021-36260 & hardening.
- [cybersecurity-career-roadmap](https://github.com/ZeroHackOrg/cybersecurity-career-roadmap): Complete guide to cybersecurity careers — roles, paths, certs, salaries, interview prep & skill matrices.
- [smart-home-security](https://github.com/ZeroHackOrg/smart-home-security): Red/blue team smart home field guide — Zigbee/Z-Wave/MQTT, default creds, cloud relay abuse & hardening.
- [router-network-device-security](https://github.com/ZeroHackOrg/router-network-device-security): Red/blue team router/network device field guide — TR-069, UPnP, SNMP, CVEs & hardening.
- [voip-uc-security](https://github.com/ZeroHackOrg/voip-uc-security): Red/blue team VoIP/UC field guide — SIP/RTP, toll fraud, CVEs & hardening.
- [ot-ics-security](https://github.com/ZeroHackOrg/ot-ics-security): Red/blue team OT/ICS field guide — Modbus/DNP3/S7, Stuxnet/Triton & hardening.
- [ai-security](https://github.com/ZeroHackOrg/ai-security): Red/blue team AI security field guide — prompt injection, model inversion, poisoning & hardening.
- [vehicle-security](https://github.com/ZeroHackOrg/vehicle-security): Red/blue team vehicle security field guide — CAN bus, OBD-II, telematics & hardening.
- [access-control-security](https://github.com/ZeroHackOrg/access-control-security): Red/blue team access control field guide — RFID/NFC, biometric spoofing & hardening.
- [mobile-app-security](https://github.com/ZeroHackOrg/mobile-app-security): Red/blue team mobile app security field guide — traffic analysis, API abuse & hardening.
- [biotech-security](https://github.com/ZeroHackOrg/biotech-security): Red/blue team biotech/medical device field guide — DICOM, FOIP, CVEs & hardening.
- [satellite-space-security](https://github.com/ZeroHackOrg/satellite-space-security): Red/blue team satellite/space security field guide — GPS spoofing, drone hijacking & hardening.
- [cve-intel](https://github.com/ZeroHackOrg/cve-intel): Open, AI-enriched CVE intelligence — 26,000+ records, 110+ fields, daily JSON.
- [zerohack-detections](https://github.com/ZeroHackOrg/zerohack-detections): Sigma, YARA, Suricata and Splunk rules mapped to MITRE ATT&CK.
- [awesome-mcp-security](https://github.com/ZeroHackOrg/awesome-mcp-security): Curated Model Context Protocol (MCP) security resources.
- [awesome-embedded-iot-security](https://github.com/ZeroHackOrg/awesome-embedded-iot-security): Curated embedded and IoT security resources.
- [llm-agent-attack-cheatsheet](https://github.com/ZeroHackOrg/llm-agent-attack-cheatsheet): LLM and AI-agent exploitation reference and defenses.

## Trending CVE labs

- [barracuda-esg-zeroday-cve-2026-116606-analysis](https://github.com/ZeroHackOrg/barracuda-esg-zeroday-cve-2026-116606-analysis): Barracuda ESG zero-day RCE chain analysis and detections.
- [onvif2shell-poc](https://github.com/ZeroHackOrg/onvif2shell-poc): ONVIF / IP-camera command-injection lab and detections.
- [node2shell-poc](https://github.com/ZeroHackOrg/node2shell-poc): Node.js RCE (CVE-2026-111497) Docker lab and PoC framework.
- [php2shell-poc](https://github.com/ZeroHackOrg/php2shell-poc): PHP RCE (CVE-2026-109618 / CVE-2026-109619) lab and PoC framework.

## AI & LLM security

- [zerollm](https://github.com/ZeroHackOrg/zerollm): Reverse-proxy AI firewall and prompt-injection sandbox.
- [zeroagent](https://github.com/ZeroHackOrg/zeroagent): Zero-trust runtime sandbox for autonomous AI agents.
- [vguard](https://github.com/ZeroHackOrg/vguard): Zero-trust spatial firewall for vector databases and RAG.
- [shadowred](https://github.com/ZeroHackOrg/shadowred): Autonomous adversarial AI emulation and continuous red teaming.

## Geek tools

- [zerohack-cli](https://github.com/ZeroHackOrg/zerohack-cli): Unified `zh` CLI for every ZeroHack tool.
- [zerohack-secret-scanner](https://github.com/ZeroHackOrg/zerohack-secret-scanner): Entropy and pattern secret scanner.
- [zerohack-honeypot](https://github.com/ZeroHackOrg/zerohack-honeypot): Lab-safe SSH/HTTP honeypot with telemetry.
- [zerohack-osint-cli](https://github.com/ZeroHackOrg/zerohack-osint-cli): Passive-first OSINT helpers.

## Optional

- [ZeroHack platform](https://zerohack.org): the ZeroHack security platform, research and Academy.
- [All repositories](https://github.com/ZeroHackOrg?tab=repositories): the complete ZeroHackOrg repository index.