1492219 matches found
ConPresentations
ConPresentations Micellaneous slide decks, resources, and recordings of some of my conference presentations. Conference Presentations BSidesCanberra 2023 Keynote: "When Exploits Aren't Binary" Slides OffensiveCon 2023: "The Print Spooler Bug That Wasn't" with James Forshaw Slides Video Zer0Con...
OLIMPOX Authentication Bypass
The vulnerability of the โOLIMPOXโ training and control systemโs software is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...
Realtek RTL8762C Information Disclosure
The vulnerability of the embedded energy-independent single-write eFUSE memory in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to the fact that power is turned on before the access control mechanism is activated. Exploiting this vulnerability can allow a hacker to...
Realtek RTL8762C SWD Information Disclosure
The vulnerability of the Serial Wire Debug SWD interface in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to improper protection against voltage and clock failures. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions and...
training-application-security
Free Secure Coding & Application Security Training โ Open Source SCORM Exercises 40 free, open-source secure coding exercises that teach web application security the way developers learn โ by exploiting real vulnerabilities like SQL injection, cross-site scripting XSS, and broken access control,...
ClamAV Insufficient Validation
The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...
ClamAV Insufficient Validation
The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...
ClamAV Insufficient Validation
The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...
Awesome-Cellular-Hacking
Awesome Cellular Hacking A comprehensive curated list of resources for 2G/3G/4G/5G cellular security research and analysis This repository consolidates community knowledge in the cellular security space, including exploits, research papers, tools, and educational resources. The goal is to preserv...
awesome-list
Awesome Cybersecurity List My personal collection of awesome blog posts, write-ups, and papers focusing on cybersecurity. For a deeper dive into cybersecurity-related tools, check out the dedicated Cybersecurity Tools list. Outline 2026 2025 2024 2023 2022 2021 2020 2019 2018 2017 2016 2014 2011...
LuLu
LuLu ็ฎไฝไธญๆ | ๆญฃ้ซไธญๆ LuLu is the free open-source macOS firewall: Documentation: Full details and usage instructions can be found here. To Support: โค Love this product and want to support it? Please check out my patreon page...
wstg
OWASP Web Security Testing Guide Welcome to the official repository for the Open Worldwide Application Security Projectยฎ OWASPยฎ Web Security Testing Guide WSTG. The WSTG is a comprehensive guide to testing the security of web applications and web services. Created by the collaborative efforts of...
DOMPurify
DOMPurify DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It's also very simple to use and get started with. DOMPurify was started in February 2014 and, meanwhile, has reached version v3.4.16. DOMPurify runs as JavaScript and works in all modern browsers...
frameworks_base_AOSP_06_r22_CVE-2022-20338
This repository does not have a README...
dnsrecon
DNSRecon DNSRecon is a Python port of a Ruby script that I wrote to learn the language and about DNS in early 2007. This time I wanted to learn about Python and extend the functionality of the original tool and in the process re-learn how DNS works and how could it be used in the process of a...
ESAPI__esapi-java-legacy_CVE-2022-23457_2-2-3-1
Enterprise Security API for Java Legacy OWASPยฎ ESAPI The OWASP Enterprise Security API is a free, open source, web application security control library that makes it easier for programmers to write lower-risk applications. The ESAPI for Java library is designed to make it easier for programmers t...
NextJS-CVE-2025-29927-Docker-Lab
๐จ NextJS-CVE-2025-29927-Docker-Lab This repository contains a Docker-based lab environment to explore and demonstrate the Next.js CVE-2025-29927 vulnerability in a controlled setting. โ ๏ธ DISCLAIMER: This lab is for educational and security research purposes only. Do not expose it to the public...
cai
Cybersecurity AI CAI Professional Edition with unlimited alias1 tokens | ๐ View Benchmarks | ๐ Learn More ๐ Community Edition Research & Learning ยท Perfect for Researchers & Students pip install cai-framework โ Free for research ๐ค 300+ AI models ๐ Community driven ๐ Open source ๐ง Extensible...
Prober
Check network assumptions reproducibly This project uses Ansible to generate BATS test files verifying security assuptions about network infrastructure. Tests are run from probe machines "prober nodes " to which Prober is deployed. This tool is meant for reproducible, automated testing of own...