HowToHunt

HowToHunt 脆弱性ハンティングのための実践的なガイド、方法論、リソースのコレクション ハッカーからコミュニティへ。ハッキングは単なるスキルではないから それはマインドセットです 💡 HowToHuntとは？ HowToHuntは、特定の脆弱性を見つけるためのステップバイステップのガイド、方法論、実践的なテクニックを集めた共同リポジトリです。初心者でも経験豊富なハンターでも、バグハンティングスキルを向上させるための貴重なリソースが見つかります。 注記:...

vulhunt

VulHunt Community Edition VulHunt は、Binarly の Research チームによって開発された脆弱性ハンティングフレームワークです。ソフトウェアバイナリや UEFI ファームウェアの脆弱性を特定するために、セキュリティ研究者や実務者を支援するよう設計されています。VulHunt は、バイナリの解析と理解のための強力で柔軟な環境を提供する Binarly の Binary Analysis and Inspection System BIAS の上に構築されています。VulHunt は Binarly Transparency Platform BT...

Sekiryu

이 프로젝트는 정말 재미있었고 제 첫 "큰" 프로젝트였습니다! 더 나은, 더 똑똑한, 더 강력한 솔루션이 이제 존재합니다:https://github.com/LaurieWired/GhidraMCP 안녕, 스페이스 카우보이 Sekiryu v0.0.2 이 Ghidra 툴킷은 Ghidra를 Headless 모드로 실행하는 것과 관련된 다양한 작업을 간소화하고 자동화하기 위해 설계된 포괄적인 도구 모음입니다. 이 툴킷은 Ghidra 내부 및 외부에서 실행할 수 있는 광범위한 스크립트를 제공하여 사용자가 분석된 코드베이스에서 취약점 헌팅...

slythestx

🐍 Slythestx モバイルセキュリティのためのスイスアーミーワーム iOSおよびAndroid向けの静的コード解析と動的脆弱性ハンティングを統合したフレームワークです。 📖 目次 概要 主な機能 アーキテクチャ アナライザースイート クイックスタート 使用方法 リリースノート ロードマップ コントリビューション 免責事項 ライセンス ⚡ 概要 Slythestx...

ThreatsDay Bulletin: PQC Push, AI Vuln Hunting, Pirated Traps, Phishing Kits & 20 More Stories

Some weeks in security feel loud. This one feels sneaky. Less big dramatic fireworks, more of that slow creeping sense that too many people are getting way too comfortable abusing things they probably shouldn’t even be touching. There’s a little bit of everything in this one, too. Weird delivery...

PT-2026-28103

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to version 2.17.0, the str eval function in notification handler.py implements a sandboxed eval for notification text templates. The sandbox attempts to restrict callable names by inspecting code.co names of the...

PT-2026-28104

Name of the Vulnerable Software and Affected Versions LibreChat versions prior to 0.8.3-rc1 Description An Insecure Direct Object Reference IDOR exists in the 'PUT /api/keys' endpoint. Due to the use of the JavaScript object spread operator after setting the authenticated user's ID, an...

PT-2026-28098

Name of the Vulnerable Software and Affected Versions Gotenberg versions prior to 8.29.0 Description Gotenberg, an API for converting document formats, contains a flaw related to URL scheme handling. A previously implemented fix for CVE-2024-21527 could be bypassed by utilizing mixed-case or...

PT-2026-28100

Name of the Vulnerable Software and Affected Versions Piwigo versions prior to 16.3.0 Description An issue exists where the ws std image sql filter function fails to perform escaping or type validation on four date filter parameters: f min date available, f max date available, f min date created,...

PT-2026-28105

Name of the Vulnerable Software and Affected Versions Typebot versions prior to 3.16.0 Description Unauthenticated users can achieve Server-Side Request Forgery SSRF by providing a custom typebot definition containing server-side code blocks. The issue exists because the fetch function within the...

PT-2026-28097

What are the limits of AI-assisted vulnerability hunting? I obtained 23 CVEs in one month. BentoML 8.2k CVE-2026-27905 HIGH SillyTavern 24.6k CVE-2026-26286 HIGH Plane 28.2k CVE-2026-27705 MEDIUM NocoDB 46.4k CVE-2026-28399 MEDIUM Mautic 8.4k CVE-2026-3105 HIGH File Browser 27.9k CVE-2026-28492...

PT-2026-28099

What are the limits of AI-assisted vulnerability hunting? I obtained 23 CVEs in one month. BentoML 8.2k CVE-2026-27905 HIGH SillyTavern 24.6k CVE-2026-26286 HIGH Plane 28.2k CVE-2026-27705 MEDIUM NocoDB 46.4k CVE-2026-28399 MEDIUM Mautic 8.4k CVE-2026-3105 HIGH File Browser 27.9k CVE-2026-28492...

Year in Review: AI based threats

2024 wasn't the year that AI rewrote the cybercrime playbook -- but it did turbocharge some of the old tricks. In Cisco Talos' 2024 Year in Review, with the help of our friends at Robust Intelligence now a Cisco company, we dissect how cybercriminals used generative AI to scale up social...

Kenzer - Automated Web Assets Enumeration And Scanning

Automated Web Assets Enumeration & Scanning Instructions for running 1. Create an account on Zulip 2. Navigate to Settings Your Bots Add a new bot 3. Create a new generic bot named kenzer 4. Add all the configurations in configs/kenzer.conf 5. Install/Run using - ./install.sh -b if you need...

Vulnerability hunting with Semmle QL: DOM XSS

In two previous blog posts part 1 and part 2, we talked about using Semmle QL in C and C++ codebases to find vulnerabilities such as integer overflow, path traversal, and those leading to memory corruption. In this post, we will explore applying Semmle QL to web security by hunting for one of­­­...

Vulnerability hunting with Semmle QL: DOM XSS

In two previous blog posts part 1 and part 2, we talked about using Semmle QL in C and C++ codebases to find vulnerabilities such as integer overflow, path traversal, and those leading to memory corruption. In this post, we will explore applying Semmle QL to web security by hunting for one of­­­...

Vulnerability hunting with Semmle QL: DOM XSS

In two previous blog posts part 1 and part 2, we talked about using Semmle QL in C and C++ codebases to find vulnerabilities such as integer overflow, path traversal, and those leading to memory corruption. In this post, we will explore applying Semmle QL to web security by hunting for one of­­­...

Vulnerability hunting with Semmle QL, part 2

The first part of this series introduced Semmle QL, and how the Microsoft Security Response Center MSRC are using it to investigate variants of vulnerabilities reported to us. This post discusses an example of how we’ve been using it proactively, covering a security audit of an Azure firmware...

Good bots, bad bots: friend or foe?

One of the most talked about technologies online today is the ubiquitous bot. Simultaneously elusive yet also responsible for all of civilisation’s woes, bots are a hot topic of contention. If we went purely by news reports, we’d assume all bots everywhere are evil, and out to get us or just...

Vulnerability hunting with Semmle QL, part 1

Previously on this blog, we’ve talked about how MSRC automates the root cause analysis of vulnerabilities reported and found. After doing this, our next step is variant analysis: finding and investigating any variants of the vulnerability. It’s important that we find all such variants and patch...