EQGRP_Lost_in_Translation

EQGRP 迷失在翻译中 odd.tar.xz.gpg、swift.tar.xz.gpg 和 windows.tar.xz.gpg 的解密内容 下载自 https://yadi.sk/d/NJqzpqo3GxZA4 来自 ShadowBrokers 的原始帖子：https://steemit.com/shadowbrokers/@theshadowbrokers/lost-in-translation windows ：包含 Windows 漏洞利用程序、植入物和攻击载荷 swift ：包含银行攻击的行动笔记 oddjob ：与 ODDJOB 后门相关的文档 sha256 哈希值 原始归...

credential-attacks-toolkit

CredAttack — Credential Attacks Toolkit ⚠️ LEGAL NOTICE — Authorised security testing ONLY. Using this tool against systems you do not own or have explicit written permission to test is illegal under the Computer Fraud and Abuse Act US, Computer Misuse Act UK, and equivalent laws worldwide. See...

SAMLRaider

SAML Raider - SAML2 Burp Extension Description SAML Raider is a Burp Suite extension for testing SAML infrastructures. It contains two core functionalities: Manipulating SAML Messages and manage X.509 certificates. This software was created by Roland Bischofberger and Emanuel Duss during a bachel...

TID-The-Instant-Destroyer

TID — The Instant Destroyer Independent security research in the field of protection against cache-based side-channel attacks. Overview TID is a specialized protocol designed to eliminate sensitive data remnants such as cryptographic keys from CPU cache layers $L1, L2, \text and L3$ immediately...

CVE-2026-79964

Dell Secure Connect Gateway (SCG) 5.0 Appliance (versions prior to 5.36.00.16 ) and Application (versions prior to 5.36.00.00 ) contain an Improper Neutralization of Escape, Meta, or Control Sequences vulnerability. An unauthenticated attacker with remote access could exploit this flaw to launch ...

Spectre-PoC

Spectre-PoC Not By Me. Collected from Book. Spectre Attacks: Exploiting Speculative Execution...

offensive-security-writeups

Offensive Security Write-ups from the CTF challenges tackled...

leHACK-Analysis-of-CVE-2018-8453

leHACK 2019: Analyzing CVE-2018-8453: An interesting tale of UAF and Double Free in Windows Kernel This talk was delivered at leHACK 2019 Abstract In this talk, we discuss intricate details of exploitation of CVE-2018-8453, a vulnerability in win32.sys Microsoft Windows driver. It which was...

gardyn

Summary In February 2025 I conducted security research on a Gardyn Home 4.0 device. During my research, I discovered multiple vulnerabilities and poor security practices. By leveraging these vulnerabilities an attacker may be able to gain system level access to a Gardyn device and use it to stage...

ECC_Attacks

Known Attacks On Elliptic Curve Cryptography Introduction Introduction To Elliptic Curves Elliptic Curves In The Context Of Cryptography ECC Attacks ECDH Attacks The Order Of The Generator Is Too Small The Order Of The Generator Is A Smooth Number The Order Of The Generator Is Almost A Smooth...

SPOILER

SPOILER：推测加载风险提升 Rowhammer 和缓存攻击 CVE-2019-0162 INTEL-SA-00238 https://www.usenix.org/system/files/sec19-islam.pdf root@kitploit: @inproceedings 236252, author = Saad Islam and Ahmad Moghimi and Ida Bruhns and Moritz Krebbel and Berk Gulmezoglu and Thomas Eisenbarth and Berk Sunar, title = SPOILER...

edrEvasionWorkshop

edrEvasionWorkshop 工作坊材料，主题为“逐步恶意软件开发：从加载器到内核规避EDR”，已在 DEF CON 34和 BSidesLV 2026上展示。 本工作坊探讨自定义恶意软件开发、EDR架构与规避、C2定制以及内核级技术，以Elastic Defend 作为目标EDR。 逐步恶意软件开发：从加载器到内核规避EDR 来自DEF CON 34 和BSidesLV 2026 的工作坊材料。 材料涵盖的主题包括： EDR架构 APC注入 Fiber 模块踩踏（Module Stomping） 调用栈欺骗 间接系统调用 使用Havoc进行C2定制 内核级攻击...

NoFrak

NoFrak NoFrak is a Proof of Concept implementation for Android designed to prevent fracking attacks described in "Breaking and Fixing Origin-Based Access Control in Hybrid Web/Mobile Application Frameworks", by Martin Georgiev, Suman Jana, and Vitaly Shmatikov. NDSS 2014. Cordova Android Cordova...

enhanced-iframe-protection

增强型 iFrame 保护 - 浏览器扩展 增强型 iFrame 保护（EIP）是一款轻量级扩展，用于自动检测嵌入的 iframe 元素并提供详细的警告，以防范浏览器中的浏览器（BITB）攻击。 截图 在上面的截图中，一个钓鱼网站将一个 iframe 元素嵌入到一个经过样式设计、看起来像真实浏览器窗口的 div 中（带有声称来自 accounts.google.com 的虚假 URL 栏）。 该扩展已检测到该 iframe 并显示安全警告，突出显示实际的钓鱼域名为（bigphish.ca）。 安装 Mozilla Firefox Google Chrome Microsoft Edge...

CLSIDFinder

CLSIDFinder Invoke-CLSIDFinder enumerates CLSID and AppID entries from the Windows registry to identify COM objects associated with Windows services via the LocalService value. The function correlates these entries, exports the results to a CSV file, and attempts COM activation when the related...

oscp-notes-2026

OSCP Field Notebook Port-indexed pentest methodology notebook: decision trees, copy-paste command patterns, and lessons from authorized practice boxes HTB / PG / personal labs. Merged from the older finalnotes-vault into this single tree. A workflow you can run under time pressure. Commands and...

Windows-RCE-exploits

我的另一个用于针对无文件攻击进行厂商测试的 GitHub 仓库 - https://github.com/smgorelik/VendorSimTestScripts Windows-RCE-exploits 该漏洞利用样本数据库是一个用于 WINDOWS 的 RCE （远程代码执行）漏洞利用及概念验证（Proof-of-Concepts）的仓库，样本上传仅用于红队和蓝队的教育目的。 概念验证（Proof of Concepts）始终通过在相关漏洞利用文件夹名称中的 PoC 标识，这些样本始终会弹出计算器或消息框，因此很容易被许多杀毒软件（AV）识别（从而阻止计算器 shellcode）...

CVE-2026-68860

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layout vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to Launch of phishing attacks...

CVE-2026-84483

WWBN AVideo through commit 9c39d8c8 contains an incomplete authentication bypass in encryptPass.json.php that allows unauthenticated attackers to compute valid HMAC tokens using the public site URL and current time. Attackers can forge authentication tokens by computing hashhmac with the site's...

python-tuf v7.0.1

A Framework for Securing Software Update Systems The Update Framework TUF is a framework for secure content delivery and updates. It protects against various types of supply chain attacks and provides resilience to compromise. This repository is a reference implementation written in Python. It is...