archerysec

...

trape

trape stable v2.0 People tracker on the Internet: Learn to track the world, to avoid being traced. Trape is an OSINT analysis and research tool, which allows people to track and execute intelligent social engineering attacks in real time. It was created with the aim of teaching the world how larg...

Conferences

Conferenze Diapositive delle presentazioni delle conferenze: BlackHat USA 2025 2-7 agosto Offensivecon 2025 16-17 maggio Black Hat Asia 2025 1-4 aprile Black hat Europe 2024 9-12 dicembre Hexacon 2024 Diapositive 4-5 ottobre Black Hat USA 2024 diapositive 3-8 agosto REcon 2024 Diapositive 28-30 g...

BLACKHAT_USA2022

BLACKHATUSA2022 Solo informazioni sui PDF pubblici di BLACKHAT USA2022 Scarica dalla release o da questo mirror Elenco file, cerca ciò che ti interessa. root@kitploit: ├── BLACKHATUSA2022 │ ├── Taking Kerberos To The Next Level.pdf │ ├──...

BLACKHAT_Asia2023

BLACKHATAsia2023 Tutto sui PDF pubblici di BLACKHAT USA2022 Elenco file, cerca ciò che ti interessa. root@kitploit: BLACKHATAsia2023 ├── AS-23-Babkin-firmWar-An-Imminent-Threat-to-the-Foundation-of-Computing.pdf ├── AS-23-Bai-Stealthy-Sensitive-Information-Collection-from-Android-Apps.pdf ├──...

slides

Folien Hack Different: Pwning von iOS 14 mit Generation-Z-Bugs BlackHat USA 2021 Zhi Zhou@CodeColorist, Jundong Xie @Jdddong Paper Aufzeichnung Parodie See No Eval: Dynamische Codeausführung zur Laufzeit in Objective-C RWCTF 2021 Zhi Zhou@CodeColorist Cross-Site Escape: Pwning der...

HyperV

HyperV Quasi un anno fa, ho scritto un PoC per la CVE-2017-0075 dopo aver letto il talk di Jordan Rabet al Blackhat. Ma non ho avuto tempo per realizzare un exploit funzionante :...

frogy2.0

Orbis - Intelligence sulla Superficie d'Attacco Intelligence sulla Superficie d'Attacco a Spettro Completo Orbis mappa automaticamente l'intera superficie d'attacco esposta su internet della tua organizzazione: sottodomini, porte aperte, applicazioni web, infrastruttura cloud, certificati TLS,...

PAKURI

PAKURI: Interfaccia Rapida Unita per la Conoscenza dei Test di Penetrazione PAKURI è stato fuso con Python e lanciato come nuovo progetto, PAKURI-THON. Panoramica...

hakuin

Hakuin is a Blind SQL Injection BSQLI optimization and automation framework written in Python 3. It abstracts away the extraction logic and allows users to easily and efficiently dump databases from vulnerable web applications. To speed up the process, Hakuin utilizes a variety of optimization...

mssqlproxy

mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...

vapi

vAPI...

reconpal

ReconPal: Leveraging NLP for Infosec Recon is one of the most important phases that seem easy but takes a lot of effort and skill to do right. One needs to know about the right tools, correct queries/syntax, run those queries, correlate the information, and sanitize the output. All of this might ...

pymultitor

PyMultiTor Python Multi Threaded Tor Proxy, Did you ever want to be at two different places at the same time? When I asked myself this question, I actually started developing this solution in my mind. While performing penetration tests there are often problems caused by security devices that bloc...

patoolkit

.. image:: https://user-images.githubusercontent.com/743886/43845704-6dbd2558-9ae1-11e8-9f77-239210fe7b6a.png PA Toolkit Pentester Academy Wireshark Toolkit PA Toolkit is a collection of traffic analysis plugins to extend the functionality of Wireshark from a micro-analysis tool and protocol...

crlf-desyncs

CRLF Desyncs Dies ist ein Repository mit nützlichen Tools und Ressourcen zum Erkennen und Ausnutzen von CRLF-basierten Desyncs, vorgestellt auf der BlackHat USA 2026 und der DEFCON 34. Inhalt cdn-origin/ - enthält aggregierte Origin-zu-Edge-Header, die zum Fuzzing einer CRLF-Injection in einer...

The Rise of ‘Vibe Hacking’ Is the Next AI Nightmare

In the very near future, victory will belong to the savvy blackhat hacker who uses AI to generate code at scale...

The great Google Ads heist: criminals ransack advertiser accounts via fake Google ads

Table of contents Overview Criminals impersonate Google Ads Lures hosted on Google Sites Phishing for Google account credentials Victimology Who is behind these campaigns? Fuel for other malware and scam campaigns Indicators of Compromise Overview Online criminals are targeting individuals and...

CVE-2024-38202

CVE-2024-38202 describes an elevation of privilege in Windows Update that could allow a user with basic privileges to reintroduce mitigated vulnerabilities or bypass some VBS protections. The vulnerability requires an attacker to coax an Administrator or delegated user into performing a system re...

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Summary: As of July 10, 2025 Microsoft has completed mitigations to address this vulnerability. See KB5042562: Guidance for blocking rollback of virtualization-based security related updates and the Recommended Actions section of this CVE for guidance on how to protect your systems from this...