patoolkit

.. image:: https://user-images.githubusercontent.com/743886/43845704-6dbd2558-9ae1-11e8-9f77-239210fe7b6a.png PA Toolkit Pentester Academy Wireshark Toolkit PA Toolkit is a collection of traffic analysis plugins to extend the functionality of Wireshark from a micro-analysis tool and protocol...

Application-Security-Curriculum

Application-Security-Curriculum Grant Ongers - Scaling AppSec through Education - DEF CON 29 AppSec Village...

edrEvasionWorkshop

edrEvasionWorkshop 工作坊材料，主题为“逐步恶意软件开发：从加载器到内核规避EDR”，已在 DEF CON 34和 BSidesLV 2026上展示。 本工作坊探讨自定义恶意软件开发、EDR架构与规避、C2定制以及内核级技术，以Elastic Defend 作为目标EDR。 逐步恶意软件开发：从加载器到内核规避EDR 来自DEF CON 34 和BSidesLV 2026 的工作坊材料。 材料涵盖的主题包括： EDR架构 APC注入 Fiber 模块踩踏（Module Stomping） 调用栈欺骗 间接系统调用 使用Havoc进行C2定制 内核级攻击...

You-re-Doing-IoT-RNG

Estás haciendo RNG de IoT Este repositorio contiene nuestros resultados y también el código de los dispositivos utilizado para generar los números aleatorios en varios dispositivos. Para una explicación más completa de las vulnerabilidades y problemas, echa un vistazo a nuestra charla de DEF CON ...

mose

MOSE（Master Of SErvers） Copyright 2020 National Technology & Engineering Solutions of Sandia, LLC NTESS. NTESSとの契約（DE-NA0003525）に基づき、米国政府は本ソフトウェアに一定の権利を保持します。 MOSEは、侵害後に構成管理（CM）システムを活用するためのポストエクスプロイテーションツールです。Puppet、Chef、Salt、Ansible...

LiveCTF-DEFCON30

LiveCTF 2022 本仓库用于存储 DEF CON CTF 决赛 LiveCTF 活动的挑战、基础设施说明、直播配置以及其他受版本控制的信息。 LiveCTF 中使用的挑战 | 挑战名称| 参赛队伍| 胜者 ---|---|---|--- 十六强赛: 1| syscall-me-maybe| Shellphish vs PTBWTL| Shellphish 十六强赛: 2| open-to-interpretation| StarBugs vs ./V /home/r/.bin/tw| StarBugs 十六强赛: 3| nopcoding| OSUSEC vs Maple...

DC30_Workshop

Contenedor del mainframe del taller DEF CON 30 Los scripts que se incluyen aquí se utilizan para construir el mainframe virtual MVS 3.8j para el taller de DEFCON 30. Gracias por echar un vistazo al taller de desbordamiento de búfer en mainframe de DEFCON 30. Usar Docker Este contenedor de Docker...

DC30-Badge-Challenge-Writeup

DC30-Badge-Challenge-Writeup 目录 介绍 挑战第 1 部分：收集音符 挑战第 2 部分：呼叫 YИИEႱ 挑战第 2A 部分：Alice 挑战第 2B 部分：Bob 挑战第 2C 部分：Carol 挑战第 2D 部分：Dan 挑战第 2E 部分：Eve 挑战第 2F 部分：Trevor 挑战第 3 部分：最终线索 如果我错过了大会上的电话怎么办？ 后记 介绍 大家好！我是 Pete，也叫 Kybr，这是我为 DEF CON 30 徽章挑战赛写的解题报告。...

dcsgonebadge

DEF CON Singapore One Badge This project manages the hardware design of the Circuit Crafters first project, an electronic hardware badge intended for distribution at the DEF CON Singapore 2026 security conference at the Marina Bay Sands Expo and Convention Centre. License This project is licensed...

EUVD-2021-24584

Malware in sbrugna...

Metasploit Weekly Wrap-Up 08/15/2025

Don’t forget to take the Metasploit User Engagement Survey! We had an awesome time at DEF CON and Black Hat with our very own zeroSteiner and jheysel-r7 presenting on five different occasions! We announced our user engagement survey there, and would love for all of you to participate until the en...

The Booker Prize Longlist and Hacker Summer Camp

Welcome to this week's edition of the Threat Source newsletter. This week the Booker Prize Longlist was released and it featured several books I've read this year a couple that are on my TBR To Be Read, a couple that I had not heard of, and a couple that make me scratch my head and question why...

CVE-2021-38111

The DEF CON 27 badge allows remote attackers to exploit a buffer overflow by sending an oversized packet via the NFMI Near Field Magnetic Induction protocol...

Cybersecurity communities. Small hacker groups, big impact

TL;DR Cybersecurity communities and groups are an excellent opportunity to network and learn There are OWASP, DEF CON, 2600, university hacking societies, Meetup communities and more to choose from They provide workshops, talks, and practical learning opportunities benefiting both newcomers and...

Root Access for Data Control: A DEF CON IoT Village Story

Every year, Rapid7 is a presenter at DEF CON’s IoT Village, sharing in-depth insight and expertise into the hacking of all things Internet of Things. This year, our perennial IoT hacking presenter, Principal Security Researcher, IoT, Deral Heiland, along with Rapid7 pentest team members, showed...

GHSA-WQ9X-QWCQ-MMGF Diesel vulnerable to Binary Protocol Misinterpretation caused by Truncating or Overflowing Casts

The following presentation at this year's DEF CON was brought to our attention on the Diesel Gitter Channel: SQL Injection isn't Dead: Smuggling Queries at the Protocol Level Archive link for posterity. Essentially, encoding a value larger than 4GiB can cause the length prefix in the protocol to...

Researchers Uncover 10 Flaws in Google's File Transfer Tool Quick Share

As many as 10 security flaws have been uncovered in Google's Quick Share data transfer utility for Android and Windows that could be assembled to trigger remote code execution RCE chain on systems that have the software installed. "The Quick Share application implements its own specific...

Metasploit Weekly Wrap-Up 08/09/2024

Black Hat & DEF CON Hopefully folks were able to catch our Rapid7 researchers @zeroSteiner & Jack Heysel show off the Metasploit 6.4's features, focusing on combinations that allow for new, streamlined attack workflows at Black Hat. If not they will also be demoing at DEF CON tomorrow in room W30...

The top stories coming out of the Black Hat cybersecurity conference

Over the next two weeks, two of the largest cybersecurity conferences in the world will take place in Las Vegas: Black Hat and DEF CON. That means product announcements, buzzwords and stories about "X smart appliance could burn your house down!" or something like that. Over the next two weeks, Il...

Windows Downgrade Attack Risks Exposing Patched Systems to Old Vulnerabilities

Microsoft said it is developing security updates to address two loopholes that it said could be abused to stage downgrade attacks against the Windows update architecture and replace current versions of the operating system files with older versions. The vulnerabilities are listed below -...