s24-e1q-root

e1q / Galaxy S24 SM-S921W — exploit root + KernelSU + unatte...

Web3Bugs

Demystifying Exploitable Bugs in Smart Contracts This project aims to provide a valuable resource for Web3 developers and security analysts by facilitating their understanding of exploitable bugs in smart contracts. We conduct a thorough analysis of exploitable bugs extracted from code4rena and...

patch-diffing-in-the-dark

Patch Diffing In The Dark A series of blog posts leveraging CVE analysis and patch diffing to discover new vulnerabilities. As revealed in the blog posts, 4 CVEs came from the in-depth study of CVE-2021-1657. TOC Results from CVE-2021-1657: Part 1 - Patch Diffing In The Dark Part 2 - Down the...

auto-repeater

AutoRepeater: Automated HTTP Request Repeating With Burp Suite tl;dr Within extender import AutoRepeater.jar Some Brief Instructions AutoRepeater will only resend requests which are changed by a defined replacement. When AutoRepeater receives a request that matches the conditions set for a given...

Cybersecurity-Books

Cybersecurity-Books Here you will get awesome collection of mostly all well-known and usefull cybersecurity books from beginner level to expert for all cybersecurity positions 1. CyberSecRoadmap 1.pdf 2. 21 days free CCNA complete videos.pdf 3. 101 Labs - CompTIA Linux+.pdf 4. 7839+ Awesome Deep...

bug-bounty-standards

What is This Repository? This repository is a list of situations that occur in bug bounty programs and how they should be handled. Many of these are currently handled on a case-by-case basis, which leads to a lot of uncertainty and frustration from hackers, program owners and platforms. The goal ...

rp2350_hacking_challenge

RP2350 Hacking Challenge Welcome to the Raspberry Pi RP2350 hacking challenge and bug bounty! Watch our quick explainer video: Update Jan 14th 2025 Congatulations to the 4 winners! Read about them allhere. A huge thank you to Thomas Roth and the team at Hextree.io for helping us develop and launc...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: pcre2: pcre2-10.49-0.1.hum1 aarch64, x8664 pcre2-devel-10.49-0.1.hum1 aarch64, x8664 pcre2-static-10.49-0.1.hum1 aarch64, x8664 pcre2-syntax-10.49-0.1.hum1 noarch pcre2-tools-10.49-0.1.hum1...

CVE-2026-9973-exploit

CVE-2026-9973 Bug fix https://chromium-review.googlesource.com/c/v8/v8/+/7822799 wasmturboshaft Fix Phi handling in Load Elimination some more Multiple Phis can depend on each other, so we have to clear all their replacements up front. Fixed: 509268941 Change-Id:...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.12: python3.12-3.12.15-1.hum1 aarch64, x8664 python3.12-debug-3.12.15-1.hum1 aarch64, x8664 python3.12-devel-3.12.15-1.hum1 aarch64, x8664 python3.12-idle-3.12.15-1.hum1 aarch64, x8664...

Bug-Bounty

Here Are Some Bug Bounty Resource From Twitter Contents List : Common Vulnerabilities and Exposures | SQL injection | Cross-Site Scripting ---|---|--- CVE-2022-40684 | SQLiDetector | XSS CVE-2022-41040 | SQLI Payload | XSS Payload | | | | | | Support:...

Bug-Bounty-Wordlists

Bug-Bounty-Wordlists A repository that includes all the important wordlists used while bug hunting. Wordlists will be updated regularly Also you are welcome to contribute in this project and upload your own wordlists. Highly Appreactiable. Note : This repository contains some public available...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.15: python3.15-3.15.0rc2-1.1.hum1 aarch64, x8664 python3.15-debug-3.15.0rc2-1.1.hum1 aarch64, x8664 python3.15-devel-3.15.0rc2-1.1.hum1 aarch64, x8664...

domained

domained archivado Una herramienta de enumeración de nombres de dominio Este proyecto ya no se mantiene. Gracias a @ccsplit y @mzfr por su trabajo en domained. Idea principal: Código Python terrible continuamente actualizado que aprovecha algunas herramientas increíbles que utilizo para la...

InjuredAndroid

InjuredAndroid - CTF Una aplicación Android vulnerable con ejemplos de ctf basados en hallazgos de bug bounty, conceptos de explotación y pura creatividad. ¡Ahora disponible en Google Play! https://play.google.com/store/apps/details?id=b3nac.injuredandroid Configuración para un dispositivo físico...

telegram_bbbot

telegrambbbot Telegram Bug Bounty Bot https://telegram.me/bugbountychannel Historial Este bot fue adaptado especialmente para su despliegue en Heroku El propósito general de este bot es "¡Ser útil para la comunidad de infosec!" El bot utiliza https://github.com/maddevsio/bbcrawler para obtener...

megplus

meg+ Obsoleto Envoltorio automatizado de reconocimiento — TomNomNom's meg con esteroides. Creado por TomNomNom y EdOverflow. Acerca de Este envoltorio automatizará numerosas tareas y te ayudará durante tu proceso de reconocimiento. El script encuentra problemas comunes, frutos maduros low-hanging...

celerystalk

celerystalk celerystalk te ayuda a automatizar tu proceso de escaneo/enumeración de red con trabajos asíncronos también conocidos como tareas mientras conservas el control total de qué herramientas quieres ejecutar. Demo interactiva: Modo Bug Bounty HackerOne Demo interactiva: Modo Evaluación de...

kenzer

KENZER - Enumeración y escaneo automatizado de activos web DEPRECATED Menciones Una introducción conceptual a la automatización de Bug Bounties Demo Capturas de pantalla Instrucciones para ejecutar 0. Ejecuta git clone https://github.com/ARPSyndicate/kenzer /home/ubuntu/kenzer && cd...

gitls

Enumerar URLs de repositorios git a partir de una lista de URL / Usuario / Org. Amigable con pipelines. Esta herramienta es útil cuando el repositorio, como Github, está incluido en el alcance de bug bounty. A veces se especifica como un nombre de org o usuario en lugar de un repositorio...