LOLBins

LOLBins Aplicación PyQT para listar todos los Binarios y Scripts Living Off The Land para Windows desde LOLBAS y binarios Unix que pueden usarse para evitar restricciones de seguridad locales en sistemas mal configurados desde GTFOBins. Windows Linux...

security-tools-cheatsheets

Hojas de trucos de herramientas de seguridad...

process_overwriting

Process Overwriting Process Overwriting is a PE injection technique, closely related to Process Hollowing and Module Overloading. With its help, you can replace the main executable not a DLL of the target process. It works only for a newly created process - injection to existing processes is not...

santa

Santa Santa 是 macOS 的二进制及文件访问授权系统。它由一个系统扩展组成，负责监视执行和文件访问，并根据本地数据库的内容做出决策；另有一个 GUI 代理，在做出阻止决策时通知用户；一个用于与远程服务器同步配置的后台服务；以及一个用于管理系统的命令行工具。 它之所以叫 Santa（圣诞老人），是因为它负责记录哪些二进制是“顽皮的”还是“乖巧的”。 文档 Santa 文档存储在 Docs 目录中，并发布在 https://northpole.dev。 文档中包括部署选项、Santa 各部分的工作原理详情，以及开发 Santa 本身的说明。 获取帮助...

ROOT-OS-DEBIAN-12-CVE-2023-44431 CVE-2023-44431 in bluez - Patched by Root

Root has patched CVE-2023-44431 in the bluez package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2023-51594 CVE-2023-51594 in bluez - Patched by Root

Root has patched CVE-2023-51594 in the bluez package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2023-51589 CVE-2023-51589 in bluez - Patched by Root

Root has patched CVE-2023-51589 in the bluez package for Root:Debian:12. Multiple fixed versions available...

blackhat-arsenal-tools

Black Hat Arsenal Tools Official Account This github account maps to the Black Hat Arsenal tools since its inception in 2011. For readibility, the tools are classified by category and not by session. This account is maintained by ToolsWatch.org the official organizer of the Black Hat Arsenal even...

ArchStrike

ArchStrike Un repositorio de Arch Linux para profesionales y entusiastas de la seguridad. Hecho al estilo Arch y optimizado para i686, x8664, ARMv6, ARMv7 y ARMv8. Nuestro sitio web Nuestro Twitter ArchStrike es un repositorio de pruebas de penetración y seguridad para usuarios de Arch Linux,...

llm-security-101

LLM Security 101 Delving into the Realm of LLM Security: An Exploration of Offensive and Defensive Tools, Unveiling Their Present Capabilities. As we embrace Large Language Models LLMs in various applications and functionalities, it is crucial to grasp the associated risks and actively mitigate, ...

ROOT-OS-DEBIAN-11-CVE-2023-44431 CVE-2023-44431 in bluez - Patched by Root

Root has patched CVE-2023-44431 in the bluez package for Root:Debian:11. Multiple fixed versions available...

CVE-2024-51996

⚠️ CVE-2024-51996 - Symfony RememberMe Auth Bypass Exploit 针对关键漏洞 CVE-2024-51996 的 Exploit，可在使用 Remember Me 机制的 Symfony 应用中实现 认证绕过 。 🧠 影响 ：无需有效凭据即可冒充特权用户（如 admin）。 📖 描述 CVE-2024-51996 是 Symfony 组件 security-http 中的一个漏洞。问题在于 未能正确验证REMEMBERME cookie 中所包含的用户名，从而允许在令牌未失效的情况下修改用户名。 拥有有效 cookie（例如...

CVE-2022-31626-CVE-2024-2961-CVE-2019-6977

CVE-2022-31626, CVE-2024-2961, CVE-2019-6977 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized...

OWASPWebGoatPHP

WebGoatPHP OWASP WebGoatPHP is a port of OWASP WebGoat to PHP and MySQL/SQLite databases. The goal is to create an interactive teaching environment for web application security by offering lessons in the form of challenges. In each challenge the user must exploit the vulnerability to demonstrate...

CVE-2018-1305

Apache Tomcat Security Bypass Vulnerability Recently, Apache released a security advisory stating that multiple versions of Apache Tomcat 7, 8, and 9 have a security bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions to perform unauthorized operations,...

Information-Security

Information-Security Information Security Resource Compilation...

Important: Red Hat Security Advisory: grafana-pcp security update

An update for grafana-pcp is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

MSRC-Security-Research

Intro This project hosts security research from the Microsoft Security Response Center MSRC. Contributing At this time, this project does not accept external contributions, but we hope to do so in the future. Most contributions require you to agree to a Contributor License Agreement CLA declaring...

BlockChainSec

Project Introduction This project is mainly used to organize and summarize blockchain security-related resources and technical documentation, mainly covering the following aspects: Basic knowledge Protocol analysis Contract auditing Public chain basics Public chain security Security incidents...

BlockChainConstruction

Preface In this article, we mainly introduce several aspects of public chain audit which are worthy of attention. For security auditors and public chain developers, this is a project worthy of reference and thinking. Architecture Before introducing the construction of public chain system, let's...