Application-Security-Curriculum

Application-Security-Curriculum Grant Ongers - Scaling AppSec through Education - DEF CON 29 AppSec Village...

patoolkit

.. image:: https://user-images.githubusercontent.com/743886/43845704-6dbd2558-9ae1-11e8-9f77-239210fe7b6a.png PA Toolkit Pentester Academy Wireshark Toolkit PA Toolkit is a collection of traffic analysis plugins to extend the functionality of Wireshark from a micro-analysis tool and protocol...

You-re-Doing-IoT-RNG

You're Doing IoT RNG This repository contains our results and also the device code used to generate the random numbers across several devices. For a more complete explanation of the vulnerabilities and issues, check out our DEF CON 21 talk here: https://www.youtube.com/watch?v=Zuqw0-jZh9Y Or if y...

edrEvasionWorkshop

edrEvasionWorkshop Workshop materials for “Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel” , presented at DEF CON 34 and BSidesLV 2026. This workshop explores custom malware development, EDR Architecture & Evasion, C2 customization, and kernel-level techniques using...

mose

MOSE Master Of SErvers Copyright 2020 National Technology & Engineering Solutions of Sandia, LLC NTESS. Bajo los términos del Contrato DE-NA0003525 con NTESS, el Gobierno de los EE. UU. retiene ciertos derechos sobre este software. MOSE es una herramienta de post-explotación que ayuda a los...

LiveCTF-DEFCON30

LiveCTF 2022 Repository for storing challenges, infrastructure notes, streaming configuration and other version controlled bits of information for the DEF CON CTF final LiveCTF event. Challenges used in LiveCTF | Challenge Name| Competitors| Victor ---|---|---|--- Round of 16: 1| syscall-me-maybe...

DC30_Workshop

DEF CON 30 Workshop Mainframe Container The scripts here are used to build the MVS 3.8j virtual mainframe for the DEFCON 30 workshop. Thank you for taking a look at the DEFCON 30 Mainframe Buffer Overflow workshop. Use docker This docker container has everything you need to learn how to do MVS...

DC30-Badge-Challenge-Writeup

DC30-Badge-Challenge-Writeup Table of Contents Intro Challenge Part 1: Gathering Notes Challenge Part 2: Calling YИИEႱ Challenge Part 2A: Alice Challenge Part 2B: Bob Challenge Part 2C: Carol Challenge Part 2D: Dan Challenge Part 2E: Eve Challenge Part 2F: Trevor Challenge Part 3: The Final Threa...

dcsgonebadge

DEF CON Singapore One Badge This project manages the hardware design of the Circuit Crafters first project, an electronic hardware badge intended for distribution at the DEF CON Singapore 2026 security conference at the Marina Bay Sands Expo and Convention Centre. License This project is licensed...

No cON Name 2026 Call for Papers

The No cON Name 2026 call for papers has been announced. It will be held in Palma, Mallorca in the Balearic Islands. from November 26th through the 27th, 2026...

Astra Linux – Vulnerability in Linux, Linux 5.10

A data race flaw was discovered in the Linux kernel, between the allocation of the con variable and the setting of con-sock. This issue results in a NULL pointer dereferencing when accessing con-sock-sk in the net/tipc/topsrv.c file within the tipc protocol in the Linux kernel...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ARM: ep93xx: Added a terminator to gpiodlookuptable. Without this terminator, if a conid is passed to gpiofind, and the conid does not exist in the lookup table, the function will not stop looping correctly, potentially leading t...

My Talk at DEF CON

Last month, I gave a talk at DEF CON on AI hacking: what happens when AIs become hackers. It's a combination of the potentialities I raised in my 2022 book A Hacker 's Mind and the lessons we're learning from current AI models engaging in hacking behavior. I'm really proud of the talk, and the fa...

Cliff Stoll’s DEF CON Talk

In August, Cliff Stoll gave a talk at DEF CON, remembering the wily hacker he stalked forty years ago. Great fun...

SUSE CVE-2026-80772

In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: fix out-of-bounds read in joyconctlrreadhandler joyconctlrreadhandler casts an incoming HID input report to struct joyconinputreport and parses it, guarding the cast only with a 12-byte length check: if size = 12 /...

Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel

These are the workshop materials for "Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel", presented at DEF CON 34 and BSidesLV 2026. This workshop explores custom malware development, EDR Architecture and Evasion, C2 customization, and kernel-level techniques using Elastic...

AZL-99672 CVE-2026-80772 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: fix out-of-bounds read in joyconctlrreadhandler joyconctlrreadhandler casts an incoming HID input report to struct joyconinputreport and parses it, guarding the cast only with a 12-byte length check: if size = 12 /...

CVE-2026-80772

CVE-2026-80772 is an out-of-bounds read in the Linux kernel 's HID Nintendo driver, specifically in joycon_ctlr_read_handler(). The function guards a cast of incoming HID input reports to a 49-byte struct joycon_input_report with only a 12-byte length check. A 12-byte report with data[0] == JC_IN...

CVE-2026-80772 HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler()

In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: fix out-of-bounds read in joyconctlrreadhandler joyconctlrreadhandler casts an incoming HID input report to struct joyconinputreport and parses it, guarding the cast only with a 12-byte length check: if size = 12 /...

CVE-2026-80771

CVE-2026-80771 affects the Linux kernel 's HID Nintendo (Joy-Con) driver. In joycon_input_create(), input_register_device() was called before joycon_config_rumble() configured the FF_RUMBLE capability and the memless force-feedback device. This allowed a concurrent EVIOCSFF ioctl to dereference a...