mose

MOSE Master Of SErvers Copyright 2020 National Technology & Engineering Solutions of Sandia, LLC NTESS. Selon les termes du contrat DE-NA0003525 avec NTESS, le gouvernement américain conserve certains droits sur ce logiciel. MOSE est un outil de post-exploitation qui aide les professionnels de la...

You-re-Doing-IoT-RNG

Вы делаете IoT RNG неправильно Этот репозиторий содержит наши результаты, а также код устройств, использованный для генерации случайных чисел на нескольких устройствах. Более полное объяснение уязвимостей и проблем смотрите в нашем докладе на DEF CON 21 здесь:...

Application-Security-Curriculum

Application-Security-Curriculum Грант Онджерс - Масштабирование AppSec посредством обучения - DEF CON 29 AppSec Village...

dcsgonebadge

Badge DEF CON Singapour Un Ce projet gère la conception matérielle du premier projet de Circuit Crafters, un badge matériel électronique destiné à être distribué lors de la conférence de sécurité DEF CON Singapour 2026 au Centre d'exposition et de congrès Marina Bay Sands. Licence Ce projet est...

patoolkit

.. image:: https://user-images.githubusercontent.com/743886/43845704-6dbd2558-9ae1-11e8-9f77-239210fe7b6a.png PA Toolkit Pentester Academy Wireshark Toolkit PA Toolkit is a collection of traffic analysis plugins to extend the functionality of Wireshark from a micro-analysis tool and protocol...

edrEvasionWorkshop

edrEvasionWorkshop Материалы воркшопа «Пошаговая разработка вредоносного ПО: обход EDR от загрузчиков до ядра» , представленного на DEF CON 34 и BSidesLV 2026. Этот воркшоп посвящён разработке кастомного вредоносного ПО, архитектуре EDR и методам обхода, настройке C2 и техникам на уровне ядра с...

LiveCTF-DEFCON30

LiveCTF 2022 Репозиторий для хранения заданий, заметок по инфраструктуре, конфигурации стриминга и прочих версионируемых материалов финального мероприятия DEF CON CTF LiveCTF. Задания, использованные в LiveCTF | Название задания| Соперники| Победитель ---|---|---|--- 1/8 финала: 1|...

DC30_Workshop

Контейнер мейнфрейма для воркшопа DEF CON 30 Скрипты здесь используются для сборки виртуального мейнфрейма MVS 3.8j для воркшопа DEFCON 30. Спасибо, что заглянули на воркшоп DEFCON 30 по переполнению буфера на мейнфрейме. Использование docker Этот docker-контейнер содержит всё необходимое, чтобы...

DC30-Badge-Challenge-Writeup

DC30-Badge-Challenge-Writeup Содержание Введение Задание, часть 1: Сбор нот Задание, часть 2: Звоним YИИEႱ Задание, часть 2A: Алиса Задание, часть 2B: Боб Задание, часть 2C: Кэрол Задание, часть 2D: Дэн Задание, часть 2E: Ева Задание, часть 2F: Тревор Задание, часть 3: Финальная нить Что если я...

No cON Name 2026 Call for Papers

The No cON Name 2026 call for papers has been announced. It will be held in Palma, Mallorca in the Balearic Islands. from November 26th through the 27th, 2026...

Astra Linux – Vulnerability in Linux, Linux 5.10

A data race flaw was discovered in the Linux kernel, between the allocation of the con variable and the setting of con-sock. This issue results in a NULL pointer dereferencing when accessing con-sock-sk in the net/tipc/topsrv.c file within the tipc protocol in the Linux kernel...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ARM: ep93xx: Added a terminator to gpiodlookuptable. Without this terminator, if a conid is passed to gpiofind, and the conid does not exist in the lookup table, the function will not stop looping correctly, potentially leading t...

My Talk at DEF CON

Last month, I gave a talk at DEF CON on AI hacking: what happens when AIs become hackers. It's a combination of the potentialities I raised in my 2022 book A Hacker 's Mind and the lessons we're learning from current AI models engaging in hacking behavior. I'm really proud of the talk, and the fa...

Cliff Stoll’s DEF CON Talk

In August, Cliff Stoll gave a talk at DEF CON, remembering the wily hacker he stalked forty years ago. Great fun...

SUSE CVE-2026-80772

In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: fix out-of-bounds read in joyconctlrreadhandler joyconctlrreadhandler casts an incoming HID input report to struct joyconinputreport and parses it, guarding the cast only with a 12-byte length check: if size = 12 /...

Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel

These are the workshop materials for "Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel", presented at DEF CON 34 and BSidesLV 2026. This workshop explores custom malware development, EDR Architecture and Evasion, C2 customization, and kernel-level techniques using Elastic...

AZL-99672 CVE-2026-80772 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: fix out-of-bounds read in joyconctlrreadhandler joyconctlrreadhandler casts an incoming HID input report to struct joyconinputreport and parses it, guarding the cast only with a 12-byte length check: if size = 12 /...

CVE-2026-80772 HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler()

In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: fix out-of-bounds read in joyconctlrreadhandler joyconctlrreadhandler casts an incoming HID input report to struct joyconinputreport and parses it, guarding the cast only with a 12-byte length check: if size = 12 /...

CVE-2026-80772

CVE-2026-80772 is an out-of-bounds read in the Linux kernel 's HID Nintendo driver, specifically in joycon_ctlr_read_handler(). The function guards a cast of incoming HID input reports to a 49-byte struct joycon_input_report with only a 12-byte length check. A 12-byte report with data[0] == JC_IN...

CVE-2026-80771

CVE-2026-80771 affects the Linux kernel 's HID Nintendo (Joy-Con) driver. In joycon_input_create(), input_register_device() was called before joycon_config_rumble() configured the FF_RUMBLE capability and the memless force-feedback device. This allowed a concurrent EVIOCSFF ioctl to dereference a...