Galaxy-Bugbounty-Checklist

Notes Try to make best Bug Bounty Checklist. All checklists come with references. Feel free to contact me maximus0xday at gmail if you have any question. To do list: Account Takeover CSRF Bypass Http Request Smuggling OSINT OAuth...

atomic-red-team

Atomic Red Team Atomic Red Team™ is a library of tests mapped to the MITRE ATT&CK® framework. Security teams can use Atomic Red Team to quickly, portably, and reproducibly test their environments. Get started You can execute atomic tests directly from the command line, no installation required. S...

jadx-magic-strings

JADX Magic Strings 插件 一个从字符串常量中提取信息的 JADX 插件。 功能 该插件从反编译代码中提取并分析字符串常量，以发现： 1. 源文件引用 ：检测字符串常量中对 Java/Kotlin 源文件（.java、.kt、.kts、.scala、.groovy）的引用 2. 方法名候选 ：使用正则表达式模式从字符串中识别潜在的方法名 3. 字符串分析 ：收集所有字符串常量及其关联的方法和类 安装 选项 1：从 GitHub 安装（推荐） 如果此插件已发布到 GitHub，你可以直接安装： root@kitploit: jadx plugins --install...

linux-malware

linux-malware このリポジトリからの更新の7日間ロールビュー 提出？ プレス/学術 https://en.wikipedia.org/wiki/Linuxmalware 17 - Initial Access, Execution, Persistence, Privilege Escalation, Defense Evasion, Credential Access, Discovery, Lateral Movement, Collection, Command and Control, Exfiltration, Impact, DarkSide...

CVE-2025-55182-poc

CVE-2025-55182 React Flightプロトコルの脆弱性。チャンク参照を介したプロトタイプチェーンの走査を許容します。bullshit-react-project でテストしています。 検出 実際のPoCが公開されたため、これは少し古くなっています。 Vite RSC : bash ./vite-detect.sh https://example.com Next.js : bash ./nextjs-detect.sh https://example.com または両方をまとめて行うには、bash ./detect.sh https://example.com...

wesng

Windows Exploit Suggester - Next Generation WES-NG WES-NG is a tool based on the output of Windows' systeminfo utility which provides the list of vulnerabilities the OS is vulnerable to, including any exploits for these vulnerabilities. Every Windows OS between Windows XP and Windows 11, includin...

0l4bs

0l4bs Cross-site scripting labs for web application security enthusiasts List of Chall : root@kitploit: Chall 1 | URL Chall 2 | Form Chall 3 | User-Agent Chall 4 | Referrer Chall 5 | Cookie Chall 6 | LocalStorage Chall 7 | Login Page Chall 8 | File Upload Chall 9 | Base64 Encoding Chall 10 |...

VulFi

VulFi v3.0 はじめに VulFi（Vulnerability Finder）ツールは、IDA Proのプラグインであり、バイナリのバグハンティングを支援するために使用できます。主な目的は、最も興味深い関数（strcpy、sprintf、systemなど）へのすべてのクロスリファレンスを一つのビューで提供することです。Hexraysデコンパイラが使用できる場合、脆弱性研究の観点から興味深くない関数呼び出し（たとえば strcpydst,"Hello World!"...

vapi

vAPI...

Cheatsheets

チートシート 私が長年にわたって収集したペネトレーションテスト/セキュリティチートシート。...

cve-2026-24688

CVE-2026-24688 - pypdf - 循环引用拒绝服务漏洞 本仓库包含用于触发CVE-2026-24688的验证概念代码。 摘要 pypdf的目录（书签）解析逻辑中存在严重的拒绝服务漏洞。当处理带有循环目录引用的PDF时，解析器进入无限循环，持续分配内存，在我的机器上每秒消耗数百MB内存，并导致系统完全崩溃。 这是一个系统级的拒绝服务，而不仅仅是应用程序挂起。 目录 maliciouscircularoutline.pdf - 带有循环目录的利用PDF（754字节） createmaliciouspdf.py - 生成利用PDF的脚本 simplereadpdf.py -...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: In the net: gro subsystem, do not merge the zcopy state. The skbgroreceive function currently copies fragments between the source skb and the GRO. This process does not check the zerocopy status, especially the SKBFLMANAGEDFRAGRE...

EUVD-2026-77153

An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680, W920, W930, and W1000. A double-free vulnerability in the Exynos MFC encoder driver due to improper cleanup of dmabuf references...

CVE-2026-89707

In the Linux kernel, the following vulnerability has been resolved: nfsd: release path refs on followdown error nfsdcrossmnt initializes a local struct path with mntget and dget before calling followdown. On a negative return the error arm jumps to out without releasing those references: err =...

EUVD-2026-76203

Contributor Insecure Direct Object References IDOR in Starter Templates = 4.7.5 versions...

CVE-2026-62113

CVE-2026-62113 is an Insecure Direct Object References (IDOR) vulnerability in the WordPress plugin Slim SEO (versions

CVE-2026-89212 XML External Entity in Akana API Platform

A flaw resulting in XML external entity XXE was found in Akana API Platform in which references were improperly restricted during XML-to-JSON processing. The issue affects Akana versions 2026.1, 2025.1.1, and all versions before 2024.1.6 including older unsupported versions of Akana and has been...

Android-Forensics-References

安卓取证参考资料 最后更新：2025年9月22日 USERDATA 分区 “/log”文件夹 /log/wifi/iwc/iwcdump.txt Cellebrite CTF 2023 回顾：Sharon 安卓设备上的答案 https://cellebrite.com/en/cellebrite-ctf-2023-recap-sharons-android/ /log/netstats /log/batterystats Cellebrite CTF 2021 - 海森堡的安卓设备...

CVE-2026-89060 Stolostron/multicluster-observability-addon: cross-namespace secret disclosure in multicluster-observability-addon via unvalidated configuration references

A cross-namespace authorization flaw in multicluster-observability-addon allows a user with permission to modify a managed cluster’s ManagedClusterAddOn configuration to reference ClusterLogForwarder or OpenTelemetryCollector resources outside the permitted namespace. If those resources reference...

CVE-2026-89060

Stolostron multicluster-observability-addon is affected by a cross-namespace secret disclosure flaw. A managed-cluster identity can reference configuration resources outside its designated namespace, allowing an attacker-controlled managed cluster to access sensitive hub Secrets . The CVSS 3.1 sc...