GATOR

GCP ATTACK TOOLKIT FOR OFFENSIVE RESEARCH GATOR - GCP Attack Toolkit for Offensive Research , a tool designed to aid in research and exploiting Google Cloud Environments. It offers a comprehensive range of modules tailored to support users in various attack stages, spanning from Reconnaissance to...

python-pentesting

Python for Pentesters Overview Getting started with Python for pentesting and red team engagements is fairly easy! This repo is just a small collection of random scripts to help get you started. Brought to you by: Examples: by Mike Felch @ustayready and Joff Thyer @joffthyer This code is provided...

Presentations

プレゼンテーション 2025 CodeBlue 2025 - 2025年11月18日〜19日 AIで加速するエクスプロイト：DSPコプロセッサからMTE対応Pixelを侵害する 発表者：PAN Zhenpeng & Billy JHENG Bing Jhong Exynosコプロセッサと踊る：楽しみと「利益」のためにSamsungをPwnする 発表者：Muhammad Ramdhan, PAN Zhenpeng & Billy JHENG Bing Jhong HITCON 2025 - 2025年8月15日〜16日 Pixel 8をクラックする：未公開DSPを悪用してMTEをバイパスす...

From Compromised Keys to Phishing Campaigns: Inside a Cloud Email Service Takeover

Exposed cloud credentials become the launchpad for mass phishing, highlighting email services as a prime target in cloud exploitation campaigns...

CVE-2019-5286

There is a reflection XSS vulnerability in the HedEx products. Remote attackers send malicious links to users and trick users to click. Successfully exploit cloud allow the attacker to initiate XSS attacks. Affects HedEx Lite versions earlier than V200R006C00SPC007...

Microsoft Fixes AI, Cloud, and ERP Security Flaws; One Exploited in Active Attacks

Microsoft has addressed four security flaws impacting its artificial intelligence AI, cloud, enterprise resource planning, and Partner Center offerings, including one that it said has been exploited in the wild. The vulnerability that has been tagged with an "Exploitation Detected" assessment is...

Breaking the Mold: Pen Testing Solutions That Challenge the Status Quo

Malicious actors are constantly adapting their tactics, techniques, and procedures TTPs to adapt to political, technological, and regulatory changes quickly. A few emerging threats that organizations of all sizes should be aware of include the following: Increased use of Artificial Intelligence a...

Cryptsetup Initrd LUKS root Shell privilege escalation vulnerability

Description A vulnerability in Cryptsetup, concretely in the scripts that unlock the system partition when the partition is ciphered using LUKS Linux Unified Key Setup. The disclosure of this vulnerability was presented as part of our talk "Abusing LUKS to Hack the System" in the DeepSec 2016...