Pwn ARM NFC

Sfida Overflow del buffer ARM tramite tag NFC Questo progetto è una sfida a basso livello open-source e divertente da realizzare. Sentiti libero di migliorarlo o usarlo nei tuoi progetti. Ogni file è distribuito "così com'è" nella speranza che sia utile, ma senza alcuna garanzia esplicita o...

sploit

sploit Sploit is a Go package that aids in binary analysis and exploitation. The motivating factor behind the development of sploit is to be able to have a well designed API with functionality that rivals some of the more common Python exploit development frameworks while taking advantage of the ...

flareon2023

Soluções do Flare-On 10 Códigos-fonte das minhas soluções para as tarefas do desafio Flare-On10...

llama_facts

Fatti sui lama Questo progetto è stato originariamente creato per il concorso CTF Women in Cybersecurity WIYCS 2022 del Rochester Institute of Technology RIT. È vulnerabile alla Server-Side Template Injection SSTI, definita nella controversa CVE CVE-2019-8341. Descrizione della sfida Descrizione:...

Owasp-top-10-k8s-2025

OWASP Kubernetes Top 10 2025, praktisch Ein Capture-the-Flag , aufbauend auf dem OWASP Kubernetes Top 10 — 2025. Du wurdest angeheuert, um NimbusMart zu red-teamen, ein fiktives E-Commerce-Unternehmen, dessen Cluster schneller wuchs als seine Sicherheit. Zehn Herausforderungen, eine pro...

wix-kickstartx-challenge-writeup

Wix KickstartX Challenge 2026 — Vollständiger Writeup Ergebnis: 200/200 100 % — Token: WKX-9245FA70-200 Datum: 24. März 2026 1. Entdeckung & Aufklärung Die Challenge-Ankündigung Ein LinkedIn-Post kündigte eine spezielle Challenge für Wix KickstartX an — ein Junior-Entwicklerprogramm. Die Regeln:...

BlueDoor

Sfida CTF BlueDoor Panoramica Nome della sfida : BlueDoor CVE : CVE-2017-0144 EternalBlue Difficoltà : 3/5 Categoria : Sfruttamento, Windows Autore/i : Seth Davis BlueDoor simula una vulnerabilità reale EternalBlue - CVE-2017-0144 in un sistema Windows 7. L'obiettivo è sfruttare la vulnerabilità,...

human-connection-ctf

Human Connection Challenge: CTF Writeup Platform: Immersi...

When prompts become shells: RCE vulnerabilities in AI agent frameworks

In this article 1. A representative case study: Semantic Kernel 2. CVE-2026-26030: In-Memory Vector Store 3. CVE-2026-25592: Arbitrary file write through SessionsPythonPlugin 4. The vulnerability 5. Attack chain overview 6. Defending the agentic edge 7. Not bugs, but developed by design 8. CTF...

Exploit for SQL Injection in Djangoproject Django

CTF Challenge: Django ORM Injection CVE-2025-64459 Catego...

Malicious code in ctf-q21-empire-tmp-test123 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Exploit for CVE-2024-53900

CTF Challenge - Mongoose RCE CVE-2024-53900 Challenge Overvie...

Exploit for Deserialization of Untrusted Data in Apache Tomcat

CVE-2020-9484 with interactive mode and args Designed speci...

The Big IAM Challenge: Test Your Cloud Security Skills

Put yourself to the test with our unique CTF challenge and boost your AWS IAM knowledge. Do you have what it takes to win The Big IAM Challenge?...

The return of the Malwarebytes CrackMe

This blog post was authored by Hasherezade Update: Malwarebytes Crackme : we already have the winners in the category "the fastest solve", congratulations! 1st: @nazywam 2nd: Suvaditya Sur @x0r19x91 3rd:@evandrix But we are still waiting for your submissions! -- Malwarebytes Threat Intelligence...

MyBB 未授权RCE漏洞（CVE-2021-27889 CVE-2021-27890）

MyBB Remote Code Execution Chain BY SIMON SCANNELL & CARL SMITH Today SonarSource is pleased to share with you a guest contribution to our Code Security blog series. The following blog post is authored by Simon Scannell and Carl Smith -two independent security researchers- joining us in sharing...

CVE-2020-5290 session fixation in rCTF

In RedpwnCTF before version 2.3, there is a session fixation vulnerability in exploitable through the token=$ssid hash when making a request to the /verify endpoint. An attacker team could potentially steal flags by, for example, exploiting a stored XSS payload in a CTF challenge so that victim...

50m-ctf: Writeup

h1 50M CTF =========== This is my solution for the h1 ctf. On the 27th of february h1 posted this tweet: Since there is no link no any sort of challenge I supposed the challenges is self contained inside this tweet. My guess was the first clue is inside the embeded picture, and since the second o...

50m-ctf: $50 million CTF Writeup

Summary: For a brief overview of the challenge you can take a look at the following image: F451370 Below I will detail each step that I took to solve the CTF, moreover all the bad assumptions that led me to a dead end in some cases. Twitter The CTF begins with this tweet: F451371 What is this...

DLINK DCS-5020L - Remote Code Execution (PoC)

DLINK DCS-5020L - Remote Code Execution PoC “The DCS-5020L Wireless N Day & Night Pan/Tilt Cloud Camera is a day/night network camera that easily connects to your existing home network for remote viewing on a range of mobile devices. It features pan, tilt and digital zoom function to allow you to...