shazhupan

This is a placeholder for a future readme. Basically, this repository is a collection of knowledge associated with my ongoing research into 杀猪盘 sha zhu pan, pig butchering scams...

cloud-sniper

Cloud Sniper : Detection-as-code platform Cloud Sniper is a comprehensive platform meticulously designed to streamline Cloud Security Operations. It swiftly responds to security incidents by analyzing and correlating cloud artifacts, ensuring a holistic view of the company's cloud security postur...

CyberStrikeAI

CyberStrikeAI 中文 | English The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next. CyberStrikeAI connects planning, execution, human oversight, evidence, and replay in one auditable...

PentestingEverything

PentestingEverything A complete, searchable penetration-testing knowledge base across 23 security domains. Live website: pentesting.m14r41.in Live Website · PentestingChecklist · Contribute · Report an Issue Read it online at pentesting.m14r41.in : fully searchable, with 108 documentation pages,...

Red-Teaming-TTPs

!CAUTION This repository contains cheatsheets, notes, and scripts related to my learning in cybersecurity, particularly Red Teaming. You'll find a variety of resources that I've compiled over the years, including: Cheatsheets : Quick reference guides for common tools and techniques. Guides :...

awesome-soc

Awesome SOC An operational handbook and knowledge base to build, run and mature a SOC including CSIRT. Covering: SOC basics detection engineering threat intelligence SOC metrics/KPI SOC automation AI use cases and best practices SOP SOC playbooks Those are my view, based on my own experience as...

LinkScope_Client

LinkScope Client Installer Download Get the installer for LinkScope Client from here: https://accentusoft.com/downloads/ Description This is the repository for the LinkScope Client Online Investigation software. LinkScope allows you to perform online investigations by representing information as...

misp-galaxy

misp-galaxy MISP galaxy is a simple method to express a large object called cluster that can be attached to MISP events or attributes. A cluster can be composed of one or more elements. Elements are expressed as key-values. There are default knowledge base such as Threat Actors, Tools, Ransomware...

chipwhisperer

ChipWhisperer Important Links Documentation | Labs | Forum | Store | NewAE ChipWhisperer 7.0: Revamped Analyzer, Project, SCA101 ChipWhisperer 7.0 is bringing major improvements to projects, analyzer, as well as a new online course, SCA101. These changes include: New Zarr based projects with...

Misconfiguration-Manager

Misconfiguration Manager Remediation Quick Start 1. Review the list of known and documented Attack Techniques and corresponding Defense Techniques to identify issues that may be present in your environment and how to remediate them Refer to this introduction to the project 2. Run ConfigManBearPig...

EUVD-2026-102503

BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users' parsed documents by supplying arbitrary fileid values. Attackers can enumerate sequential file ids against GET /api/v1/knowledge/filebbox to...

libsignal

Overview libsignal contains platform-agnostic APIs used by the official Signal clients and servers, exposed as a Java, Swift, or TypeScript library. The underlying implementations are written in Rust: libsignal-protocol: Implements the Signal protocol, including the Double Ratchet algorithm. A...

ULTIMATE-CYBERSECURITY-MASTER-GUIDE

🛡️ ULTIMATE CYBERSECURITY MASTER GUIDE Professional Cybersecurity Knowledge Base · Red Team · Blue Team · Purple Team Compiled from 70+ expert books · 90+ PNWC internal documents · custom tools & scripts Abide by theLegal Terms of Use & Disclaimer for the use and misuse of this repository. "Under...

WhoCord

WhoCord An interactive OSINT canvas that grows with every discovery. Start with a seed — a Discord user, username, email, domain, phone, image, or URL — and watch the map build itself in real time. Screenshots Gallery: 1 · 2 · 3 | ---|--- | 1. Start page| 2. Canvas with details panel | 3. Multipl...

IDAssist

IDAssist AI-Powered Reverse Engineering Plugin for IDA Pro Author: Jason Tang Description IDAssist is an IDA Pro plugin that integrates LLM-powered analysis directly into IDA's interface, providing AI-assisted binary reverse engineering through configurable LLM providers, semantic knowledge graph...

CVE-2026-111363 BISHENG through 3.0.0-beta4 IDOR via /api/v1/knowledge/file_bbox

BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users' parsed documents by supplying arbitrary fileid values. Attackers can enumerate sequential file ids against GET /api/v1/knowledge/filebbox to...

CVE-2026-111363

The BISHENG platform, up to version 3.0.0-beta4 , is vulnerable to an Insecure Direct Object Reference (IDOR) (CWE-639) in the /api/v1/knowledge/file_bbox endpoint. This flaw allows authenticated low-privileged users to access and read parsed documents belonging to other users or tenants by provi...

longfellow-zk

Longfellow ZK Overview The Longfellow library enables the construction of zero-knowledge protocols concerning legacy identity verification standards such as the ISO MDOC standard, the JWT standard, and W3 Verifiable Credentials. This implementation is described in: Anonymous credentials from ECDS...

BHPAI

TÀI LIỆU DỰ ÁN: BHPAI Phiên bản hệ thống : V1.6 Enterprise Edition Bản cập nhật Toàn diện Tính năng Hệ thống Tác giả : Rin449 Ngôn ngữ & Công nghệ cốt lõi: C++17 MinGW-w64 / MSYS2, Python 3.9+, PyQt6, MinHook, Capstone Engine, Intel PT Processor Trace, PyTorch, LightGBM, OpenSSL 3.x, zlib,...

RedTeaming-Tactics-and-Techniques

description: - These are notes about all things focusing on, but not limited to, red teaming and offensive security. What is ired.team notes? This is publicly accessible personal red teaming notes at https://ired.team and https://github.com/mantvydasb/RedTeam-Tactics-and-Techniques about my...