90 matches found
Zero-Day-Legacy
🎓 Projeto de Graduação — Universidade Nacional de Ajloun ANU Faculdade de TI · Cibersegurança e Computação em Nuvem · Ano Acadêmico 2026 🏆 Maior nota da universidade: 97% 📖 Visão Geral Zero-Day Legacy é uma máquina de laboratório Boot-to-Root CTF Capture The Flag realista e intencionalmente vul...
CyberStrikeAI
CyberStrikeAI 中文 | English AI-नेटिव साइबर सुरक्षा के लिए कार्रवाई की प्रणाली—जहाँ इरादा नियंत्रित निष्पादन बन जाता है, साक्ष्य परिचालन स्मृति बन जाता है, और हर ऑपरेशन अगले को बेहतर बनाता है। CyberStrikeAI योजना, निष्पादन, मानवीय निगरानी, साक्ष्य और रीप्ले को एक लेखापरीक्षण-योग्य कार्यक्षेत्र में...
CVE-2025-58434-AND-59528-POC
Flowise डुअल CVE PoC — CVE-2025-58434 + CVE-2025-59528 ⚠️ केवल शैक्षिक और अधिकृत सुरक्षा अनुसंधान के लिए। इस टूल को उन सिस्टमों के विरुद्ध चलाना जिनके स्वामी आप नहीं हैं या जिनके परीक्षण के लिए आपके पास लिखित अनुमति नहीं है, अवैध है। विषय-सूची अवलोकन कमजोरियों का विवरण CVE-2025-58434 — खाता...
ad-autopwn
AD AutoPwn من الصفر إلى مدير المجال — سلسلة هجوم آلية على Active Directory أداة اختبار اختراق آلية بالكامل تربط أكثر من 25 تقنية هجوم لاختراق بيئات Active Directory. مصممة لتقييمات الأمن المصرح بها. root@kitploit: /\ | \ /\ | | | \ / | | | / \ || | / \ /\ V V / ' \ // \/ // \,|\/| //|||| ⚡ من...
soc-investigation-powershell-edrfreeze
تحقيق في أداة PowerShell EDRFreeze دراسة حالة LetsDefend يحتوي هذا المستودع على تحقيق موثّق في SOC استنادًا إلى سيناريو LetsDefend يتضمن نشاط PowerShell مشبوهًا وحمولة مستضافة على GitHub وتنفيذ أداة EDRFreeze. ما يتضمنه هذا المستودع التقرير الكامل: report.md الخط الزمني: timeline.md مؤشرات...
CVE-2021-3456
CVE-2021-3456 एक व्यावहारिक श्रृंखला जो एक हानिरहित PDF फ़ाइल से शुरू होती है और AWS EC2 इंस्टेंस पर रिवर्स शेल पर समाप्त होती है शुरुआत: PDF पेलोड तैयार करना यह सब हमले के फ्रंट एंड से शुरू होता है। PowerShell के अंतर्निहित WScript ऑब्जेक्ट का उपयोग करके, हम एक PDF के अंदर एक स्क्रिप्ट एम्बेड कर...
SniperRoost
SniperRoost CVE-2017-11774 का शोषण करने के लिए एक वैध हमला श्रृंखला उत्पन्न करने हेतु प्रयुक्त, ईरानी APT से जुड़ा, केवल अनुसंधान PoC है; कृपया हानि के लिए उपयोग न करें।...
whiskeysamlandfriends
WhiskeySAML e Amigos TicketsPlease TicketsPlease: Biblioteca Python para auxiliar na geração de tickets Kerberos, recuperação remota das configurações do ADFS, geração de tokens Golden SAML e recuperação de Tokens de Acesso do Azure. WhiskeySAML WhiskeySAML: Ferramenta de prova de conceito para u...
PYSEC-2026-1348 Fides' Admin UI User Password Change Does Not Invalidate Current Session
Summary Admin UI user password changes in Fides do not invalidate active user sessions, creating a vulnerability chaining opportunity where attackers who have obtained session tokens through other attack vectors such as XSS can maintain access even after password reset. This issue is not directly...
AI is accelerating cyberattacks—here’s how to stay ahead
In March, we wrote that identity security has become the new pressure point for modern cyberattacks. Since then, AI has only increased that pressure. AI helps cyberattackers move faster across the attack chain: personalizing social engineering at scale, automating reconnaissance, analyzing leaked...
claude-security-scanner
🇨🇳 ⚡ bash git clone https://github.com/290298661...
HunterAgent: Neuro-Symbolic Attack Trace Reconstruction under Anti-Forensics
Modern alert-triage systems reduce SOC burden by filtering false positives, but flagging a high-risk alert is only the start of incident response. Threat hunting requires reconstructing causal attack chains across heterogeneous, partially corrupted logs. Against APTs using anti-forensics parent-P...
When prompts become shells: RCE vulnerabilities in AI agent frameworks
In this article 1. A representative case study: Semantic Kernel 2. CVE-2026-26030: In-Memory Vector Store 3. CVE-2026-25592: Arbitrary file write through SessionsPythonPlugin 4. The vulnerability 5. Attack chain overview 6. Defending the agentic edge 7. Not bugs, but developed by design 8. CTF...
When prompts become shells: RCE vulnerabilities in AI agent frameworks
In this article 1. A representative case study: Semantic Kernel 2. CVE-2026-26030: In-Memory Vector Store 3. CVE-2026-25592: Arbitrary file write through SessionsPythonPlugin 4. The vulnerability 5. Attack chain overview 6. Defending the agentic edge 7. Not bugs, but developed by design 8. CTF...
CVE-2026-40175
Axios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1 are vulnerable to a specific gadget-style attack chain in which prototype pollution in a third-party dependency may be leveraged to inject unsanitized header values into outbound requests. This...
CVE-2026-40175
Axios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1 are vulnerable to a specific gadget-style attack chain in which prototype pollution in a third-party dependency may be leveraged to inject unsanitized header values into outbound requests. This...
Multi-Stage-Web-Attack-XSS-to-Admin-Takeover-and-RCE
🛡️ Multi-Stage Web Attack: XSS to Admin Takeover & RCE This p...
certstrike
CertStrike ADCS exploitation and PKI attack framework with in...