antisquat

AntiSquat AntiSquat leverages AI techniques such as natural language processing NLP, large language models ChatGPT and more to empower detection of typosquatting and phishing domains. How to use Clone the project via git clone https://github.com/redhuntlabs/antisquat. Install all dependencies by...

XPRTestSuite

XProtect Remediator Test Suite A collection of scripts and documents to help future XProtect Remediator XPR research, presented at Black Hat USA 2025 About This Repository This repository contains: The scripts to create harmless minimal files and processes that reproduce the remediation of each...

DakshSCRA

Daksh SCRA Source Code Review Assist Author: - Debasis Mohanty [email protected] - Twitter / X: @coffeensecurity - www.coffeeandsecurity.com About Daksh SCRA Daksh SCRA Source Code Review Assist is built to enhance the efficiency of the source code review process, providing a well-structured...

cdf

CDF – crypto differential fuzzing CDF is a tool to automatically test the correctness and security of cryptographic software. CDF can detect implementation errors, compliance failures, side-channel leaks, and so on. CDF implements a combination of unit tests with "differential fuzzing", an approa...

slides

slides Hack Different: Pwning iOS 14 with Generation Z Bugz BlackHat USA 2021 Zhi Zhou@CodeColorist, Jundong Xie @Jdddong paper recording parody See No Eval: Runtime Dynamic Code Execution in Objective-C RWCTF 2021 Zhi Zhou@CodeColorist Cross-Site Escape: Pwning macOS Safari Sandbox the Unusual W...

de4dot

Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...

Blackhat-USA-2022-Materials

Black Hat USA 2022 Presentation Materials Presentation materials for my Black Hat USA 2022 Briefing and Arsenal talks Black Hat USA Briefing - Controlling the Source: Abusing Source Code Management Systems Description...

BLACKHAT_USA2022

BLACKHATUSA2022 Just About BLACKHAT USA2022 PDF Public Download in release or this mirror File List, Search what your intersting. ├── BLACKHATUSA2022 │ ├── Taking Kerberos To The Next Level.pdf │ ├── US-22-ABDELLATIF-Unlimited-Results-Breaking-Firmware-Encryption.pdf │ ├──...

crlf-desyncs

CRLF Desyncs This is a repository containing useful tools and resources for detecting and exploiting CRLF-based Desyncs, presented at BlackHat USA 2026 and DEFCON 34. Contents cdn-origin/ - contains aggregated origin-to-edge headers useful for fuzzing a CRLF injection on a response...

Malicious code in mp3-do-wnload-file-to-day-27091-usa-united-state-of-atlanta-xoisl-pqpsio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87c9d9e58745706fee426791a737ac7812546f610fffa36157578214e4e878ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in mp3-do-wnload-file-to-day-27091-usa-united-state-of-atlanta-xoisl-pqpsio

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-18023 Malicious code in mp3-do-wnload-file-to-day-27091-usa-united-state-of-atlanta-xoisl-pqpsio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87c9d9e58745706fee426791a737ac7812546f610fffa36157578214e4e878ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview mp3-do-wnload-file-to-day-27091-usa-united-state-of-atlanta-xoisl-pqpsio is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no...

PT-2026-94465

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where the ntfs mft record alloc function fails to validate the usa ofs variable before using it to read the update sequence number from an on-disk...

Black Hat USA 2024 Conference Slides

Black Hat USA 2024 conference slides for topics Self-Hosted GitHub CI/CD Runners: Continuous Integration, Continuous Destruction, From Weapon to Target: Quantum Computers Paradox, Listen Up: Sonos Over-The-Air Remote Kernel Exploitation and Covert Wiretap, Windows Downdate: Downgrade Attacks Usin...

Black Hat USA 2023 Conference Slides

Black Hat USA 2023 conference slides for topics Does Public Disclosure of Vulnerabilities Affect Hacker Participation in Bug Bounty Programs?, Diversity Microtalks: Perspectives on Creating Change, ODDFuzz: Hunting Java Deserialization Gadget Chains via Structure-Aware Directed Greybox Fuzzing,...

Black Hat USA: TP-Link Flaws Put Omada Controllers and Camera Feeds at Risk

Forescout disclosed 15 TP-Link flaws at Black Hat USA 2026 that could expose Omada credentials and VPN keys, allow internal access and affect VIGI camera feeds...

Black Hat USA 2026: One GitHub Issue Could Compromise Major AI Coding Workflows

At Black Hat USA 2026, Novee found GitHub workflow flaws in Claude Code, Gemini CLI and Codex that enabled RCE, credential theft and agent control in pipelines...

LG to Ban Residential Proxies from Smart TV Apps

The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one's television into an always-on residential proxy node. The move comes less than a month after researchers found that more than 42 percent of games and other apps available...

Malicious code in bh-usa-automate-req-ase (PyPI)

Source: kam193 b0340aadb507418f2d21cfa7d568f133db23a6392a2ec64411540ec4ce5456d7 If run, the package exfiltrates AWS credentials. Though it's described as test, the exfiltration really happens --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...