slides

diapositivas Hack Different: Pwnear iOS 14 con Bugz de la Generación Z BlackHat USA 2021 Zhi Zhou@CodeColorist, Jundong Xie @Jdddong artículo grabación parodia See No Eval: Ejecución dinámica de código en tiempo de ejecución en Objective-C RWCTF 2021 Zhi Zhou@CodeColorist Cross-Site Escape: Pwnea...

XPRTestSuite

XProtect Remediator 测试套件 一套脚本和文档，旨在帮助未来的 XProtect Remediator XPR 研究，已在 2025 年黑帽美国大会 上发布。 关于本仓库 本仓库包含： 用于创建无害的最小文件和进程的脚本，以重现 XPR 每个扫描模块的修复过程。 使用 RemediationBuilder DSL 描述逆向工程得到的 XPR 修复（或检测）逻辑的文档。 这些脚本和文档是为了验证我们对 XPR 的逆向工程而创建的。我们希望本仓库能对将来进行 XPR 分析并希望了解修复在什么条件下发生的安全研究人员有所帮助。 注意：请在虚拟化环境中运行这些脚本。 准备工作...

crlf-desyncs

CRLF Desyncs Este es un repositorio que contiene herramientas y recursos útiles para detectar y explotar desyncs basados en CRLF, presentado en BlackHat USA 2026 y DEFCON 34. Contenido cdn-origin/ - contiene cabeceras agregadas de origin-to-edge útiles para fuzzear una inyección CRLF en una...

DakshSCRA

Daksh SCRA（源代码审查辅助工具） Author: Debasis Mohanty [email protected] Twitter / X: @coffeensecurity www.coffeeandsecurity.com root@kitploit: 关于 Daksh SCRA Daksh SCRA（源代码审查辅助工具）旨在提升源代码审查流程的效率，为代码审查人员提供一种结构清晰、组织有序的方法。 Daksh SCRA...

cdf

CDF – crypto differential fuzzing CDF is a tool to automatically test the correctness and security of cryptographic software. CDF can detect implementation errors, compliance failures, side-channel leaks, and so on. CDF implements a combination of unit tests with "differential fuzzing", an approa...

antisquat

AntiSquat AntiSquat leverages AI techniques such as natural language processing NLP, large language models ChatGPT and more to empower detection of typosquatting and phishing domains. How to use Clone the project via git clone https://github.com/redhuntlabs/antisquat. Install all dependencies by...

Blackhat-USA-2022-Materials

Materiales de Presentación de Black Hat USA 2022 Materiales de presentación para mis charlas Briefing y Arsenal de Black Hat USA 2022 Black Hat USA Briefing - Controlling the Source: Abusing Source Code Management Systems Descripción...

BLACKHAT_USA2022

BLACKHATUSA2022 Solo sobre PDF públicos de BLACKHAT USA2022 Descarga en release o este espejo Lista de archivos, busca lo que te interese. root@kitploit: ├── BLACKHATUSA2022 │ ├── Taking Kerberos To The Next Level.pdf │ ├── US-22-ABDELLATIF-Unlimited-Results-Breaking-Firmware-Encryption.pdf │ ...

de4dot

Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...

Black Hat USA: TP-Link Flaws Put Omada Controllers and Camera Feeds at Risk

Forescout disclosed 15 TP-Link flaws at Black Hat USA 2026 that could expose Omada credentials and VPN keys, allow internal access and affect VIGI camera feeds...

LG to Ban Residential Proxies from Smart TV Apps

The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one's television into an always-on residential proxy node. The move comes less than a month after researchers found that more than 42 percent of games and other apps available...

Malicious code in final-poc-usa (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6cc39e355e69ec11b0532da1e2b2a418601a4c5594b100ba6f054f0e52be44be The OpenSSF Package Analysis project identified 'final-poc-usa' @ 0.99800.0 rubygems as malicious. It is considered malicious because: - The...

MAL-2026-6118 Malicious code in final-poc-usa (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6cc39e355e69ec11b0532da1e2b2a418601a4c5594b100ba6f054f0e52be44be The OpenSSF Package Analysis project identified 'final-poc-usa' @ 0.99800.0 rubygems as malicious. It is considered malicious because: - The...

PT-2026-43572

The HBook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'hb country iso', 'hb usa state iso', and 'hb canada province iso' parameters in all versions up to, and including, 2.1.6 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2025-63004

Missing Authorization vulnerability in Skynet Technologies USA LLC All in One Accessibility all-in-one-accessibility allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects All in One Accessibility: from n/a through = 1.15...

CVE-2025-63004

CVE-2025-63004 involves a Missing Authorization vulnerability in the WordPress plugin All in One Accessibility by Skynet Technologies USA LLC. Public data indicates affected version range is from n/a through 1.14, with a CVSS3.1 base score of 4.3 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N). The connect...

EUVD-2020-19888

Malware in sbrugna...

EUVD-2024-31553

Malicious code in bioql PyPI...

Zoom Workplace 安全漏洞

Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace that stems from a buffer overflow that could lead to a denial of service attack...

TalentNeuron Suite 安全漏洞

TalentNeuron Suite is a comprehensive platform for talent layout by TalentNeuron USA. A security vulnerability exists in TalentNeuron Suite version 0.4.3, which stems from a parameter injection and could lead to an SQL injection attack...