DC30-Badge-Challenge-Writeup

DC30-Badge-Challenge-Writeup Table of Contents Intro Challenge Part 1: Gathering Notes Challenge Part 2: Calling YИИEႱ Challenge Part 2A: Alice Challenge Part 2B: Bob Challenge Part 2C: Carol Challenge Part 2D: Dan Challenge Part 2E: Eve Challenge Part 2F: Trevor Challenge Part 3: The Final Threa...

DEFCON-CICD-pipelines-workshop

CI/CD : The new Eldorado ? Abstract CI/CD pipelines are increasingly becoming part of the standard infrastructure within dev teams, with the rise of new approaches such as Infrastructure as Code, the sensitivity level of such pipelines is escalating quickly. In case of compromise, it is not just...

Lsass-Shtinkering

Lsass Shtinkering New method of dumping LSASS by abusing the Windows Error Reporting service. It sends a message to the service with the ALPC protocol to report an exception on LSASS. This report will cause the service to dump the memory of LSASS. Prerequisites The registry value "DumpType" under...

DC30_Workshop

DEF CON 30 Workshop Mainframe Container The scripts here are used to build the MVS 3.8j virtual mainframe for the DEFCON 30 workshop. Thank you for taking a look at the DEFCON 30 Mainframe Buffer Overflow workshop. Use docker This docker container has everything you need to learn how to do MVS...

SkeletonKey

CVE-2026-6765 · FormAutofill test-only handlers reachable outside automation Reporter credited by Mozilla in MFSA 2026-30 : Abdulaziz Alasaiqah. This directory holds a real reproduction harness for the vulnerability. It is meant to be run against a locally downloaded vulnerable Firefox build. It...

[SECURITY] Fedora 45 Update: bodr-10-30.fc45

The Blue Obelisk Data Repository lists many important chemoinformatics data such as element and isotope properties, atomic radii, etc. including references to original literature. Developers can use this repository to make their software interoperable...

Exploit for CVE-2026-68376

CVE-2026-6837...

CLSA-2026-1790074038 TuxCare security update for org.springframework (30 CVEs)

TuxCare rebuilt 11 org.springframework packages to address 30 CVEs. Fixed in 5.1.5.RELEASE-tuxcare.4...

CVE-2026-61630 nginx ignition has TOTP Reuse During Validity Window

nginx ignition is a user interface for the nginx web server. In versions 2.33.0 through 2.35.0, any user that has enabled the OTP 2FA can have their TOTP reused during the standard 30 second validity window. Version 2.35.1 patches the issue...

CVE-2026-61630 nginx ignition has TOTP Reuse During Validity Window

nginx ignition is a user interface for the nginx web server. In versions 2.33.0 through 2.35.0, any user that has enabled the OTP 2FA can have their TOTP reused during the standard 30 second validity window. Version 2.35.1 patches the issue...

Malicious code in lia-30 (npm)

Source: amazon-inspector 01131e9662f4420413572611a39a689960a9fe85346bb280a107f19155ff84b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

CLSA-2026-1789677164 TuxCare security update for 32 packages (16 CVEs)

TuxCare rebuilt 32 packages to address 16 CVEs. Fixed in 7.0.70-tuxcare.4...

Malicious code in kentung-30 (npm)

Source: amazon-inspector 2196e8e14ec3def4e9234ccb43f62ef3450dbbb4c3436bd98fc062a496ae43af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in john-wick-4-2023-pelicula-completa-espa-ol-spanish--marzo-27-30 (npm)

--- Credit: OpenSSF source...

Malicious code in ita-30 (npm)

Source: amazon-inspector e4a0928461b6151e0010218d995115927e0e3d65fb22c60c100811c9a09802b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in ira-30 (npm)

Source: amazon-inspector 4b4e2dc723998f885fc6b543752c982334b21bb05497addc952f3fae19e6e81b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in ilop-30 (npm)

Source: amazon-inspector b89c8a1b1bcd20803476b599e569e0fb84399651d47d1310b64291d7acac76d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in ilang-30 (npm)

Source: amazon-inspector 4eb47064530c55628122c251c58694de35c35e5de7e7d0fbc3b4c61600b5d377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in icha-30 (npm)

Source: amazon-inspector d92f061c539767413ded9a61fad29a92450ce55592bcbe91a612f306855f0c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hokage-30 (npm)

Source: amazon-inspector f9d25c4211688d818f181dbd2f365a0c63a7f6c7fad00f3b268066f258216800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...