wordpress-hacking

WordPress Hacking 워드프레스와 그 플러그인 및 테마 해킹에 유용한 리소스입니다. 버그 바운티 워드프레스 취약점을 찾고 보고하는 일에 열정이 있다면, 다음 버그 바운티 프로그램에 참여해 보세요: Wordfence 및 Patchstack. 제 Wordfence 링크를 통해 가입하시면 취약점 5개를 보고할 때 저에게 소액의 보너스가 지급되어, 제가 커뮤니티를 위한 도구와 리소스 작업을 지원하는 데 도움이 됩니다. 감사합니다! 플러그인 워드프레스 플러그인 및 테마의 동적 분석과 해킹을 돕기 위해 설계된 플러그인을...

MobileApp-Pentest-Cheatsheet

모바일 애플리케이션 침투 테스트 치트 시트 모바일 앱 침투 테스트Pentest 치트 시트는 특정 모바일 애플리케이션 침투 테스트 주제와 체크리스트에 대한 고가치 정보를 간결하게 수집하기 위해 제작되었으며, 침투 테스트 수행을 위한 OWASP Mobile Risk Top 10에 매핑되어 있습니다. Mobile Application Security Testing Distributions All-in-one Mobile Security Frameworks Android Application Penetration Testing...

XnlReveal

소개 - v4.5 이것은 다음과 같은 작업을 수행할 수 있는 Chrome/Firefox 확장 프로그램 입니다: 범위 내에 있는 호스트의 경우: 반사되는 모든 쿼리 매개변수에 대한 알림을 표시합니다"sus" 매개변수도 식별합니다. 선택적으로 ', " 및 문자가 인코딩되지 않은 채 반사되는지 확인합니다. 반사된 매개변수의 세부 정보를 브라우저 DevTools의 Xnl Reveal 탭에 기록합니다. 반사된 매개변수의 세부 정보를 사용자 클립보드에 복사합니다. 방문한 경로에 대한 Wayback Archive 엔드포인트최대 1000개를...

XSpear

XSpear XSpear 是一个基于 Ruby gems 的 XSS 扫描器 !IMPORTANT XSpear 仓库已归档 此仓库已归档，现为只读状态。 XSpear 不再积极维护。 尝试使用 Dalfox 🌙🦊 一个更快、更强大且具有高级功能的 XSS 扫描器。 → https://github.com/hahwul/dalfox 主要特性 基于模式匹配的 XSS 扫描 在无头浏览器上检测 alert confirm prompt 事件（使用 Selenium） 测试请求/响应以绕过 XSS 保护并检测反射（或所有）参数 反射参数 所有参数（用于盲 XSS 等） 过滤测试 even...

pyrebox

보관된 프로젝트 이 프로젝트는 보관되었으며 이슈 큐가 잠겼습니다. 이 프로젝트는 참조 목적으로만 공개로 유지됩니다. .. image:: docs/media/pyreboxlogolightbg.png .. QEMU: http://qemu.org/ .. DECAF: https://github.com/sycurelab/DECAF .. S2E: https://github.com/dslab-epfl/s2e .. AVATAR: https://github.com/avatartwo .. PANDA:...

flare-qdb

FireEye Labs Query-Oriented Debugger flare-qdb is a command-line and scriptable Python-based tool for evaluating and manipulating native program state. It uses Vivisect to set a breakpoint on each queried instruction and executes Python code when hit. flare-qdb frees the analyst to take a nonline...

ShielDroid: A Hybrid Approach Integrating Machine and Deep Learning for Android Malware Detection

The rapid advancement of modern technology has led to a significant increase in the use of smart devices, such as smartphones and tablets, resulting in the widespread adoption of mobile applications. Although applications are required to undergo malware screening before being published on officia...

PYSEC-2026-1673 MobSF Stored Cross-Site Scripting (XSS)

Product: MobSF Version: CFBundleIdentifier value. In the dynamicanalysis.html file you do not sanitize...

Runtime Skill Audit: Targeted Runtime Probing for Agent Skill Security

Agent skills let LLM agents reuse instructions, resources, tools, and workflows, but they also create a new place for malicious behavior to hide. A skill may look benign in its documentation or code while becoming harmful only when it is invoked with particular user requests, local assets,...

angr 9.2.221

angr is an open-source binary analysis platform for Python. It combines both static and dynamic symbolic "concolic" analysis, providing tools to solve a variety of tasks...

How to Compare the Security of Code Written by Humans to LLM-Generated Code

Large language models LLMs are rapidly transforming how software is created and maintained. Comparing LLM-generated code against human-written standards is essential to determine whether these new tools uphold or erode the security baselines established by professional developers. Yet, we lack a...

angr 9.2.219

angr is an open-source binary analysis platform for Python. It combines both static and dynamic symbolic "concolic" analysis, providing tools to solve a variety of tasks...

angr 9.2.216

angr is an open-source binary analysis platform for Python. It combines both static and dynamic symbolic "concolic" analysis, providing tools to solve a variety of tasks...

FuzzingBrain V2: A Multi-Agent LLM System for Automated Vulnerability Discovery and Reproduction

Software vulnerabilities pose critical security threats, with nearly 50,000 CVEs reported in 2025. While Large Language Models LLMs show promise for automated vulnerability detection, three key challenges remain. First, LLM-generated vulnerability reports suffer from high false positive rates and...

angr 9.2.215

angr is an open-source binary analysis platform for Python. It combines both static and dynamic symbolic "concolic" analysis, providing tools to solve a variety of tasks...

ethical-hacking-lab-reports

Ethical Hacking & Information Security Lab Reports !Security...

angr 9.2.214

angr is an open-source binary analysis platform for Python. It combines both static and dynamic symbolic "concolic" analysis, providing tools to solve a variety of tasks...

Exploit for Embedded Malicious Code in Tukaani Xz

Security Review: CVE-2024-3094 XZ Utils Backdoor Автор:...

angr 9.2.213

angr is an open-source binary analysis platform for Python. It combines both static and dynamic symbolic "concolic" analysis, providing tools to solve a variety of tasks...

EDySec: A Deep Learning-Based Explainable Dynamic Analysis Framework for Detecting Malicious Packages in PyPI Ecosystem

The security of open-source software repositories is increasingly threatened by next-gen software supply chain attacks. These attacks include multiphase malware execution, remote access activation, and dynamic payload generation. Traditional Machine Learning ML detectors struggle to detect these...