mose

MOSE Master Of SErvers Copyright 2020 National Technology & Engineering Solutions of Sandia, LLC NTESS Under the terms of Contract DE-NA0003525 with NTESS, the U.S. Government retains certain rights in this software MOSE는 침투 이후post-exploitation 도구로, 보안 전문가가 침투 후 구성 관리CM 시스템을 활용할 수 있도록 도와줍니다...

patoolkit

.. image:: https://user-images.githubusercontent.com/743886/43845704-6dbd2558-9ae1-11e8-9f77-239210fe7b6a.png PA Toolkit Pentester Academy Wireshark Toolkit PA Toolkit is a collection of traffic analysis plugins to extend the functionality of Wireshark from a micro-analysis tool and protocol...

Application-Security-Curriculum

Application-Security-Curriculum Grant Ongers - Scaling AppSec through Education - DEF CON 29 AppSec Village...

You-re-Doing-IoT-RNG

IoT RNGのやり方が間違っている このリポジトリには、私たちの調査結果と、複数のデバイスで乱数を生成するために使用したデバイスコードが含まれています。脆弱性と問題のより完全な説明については、こちらのDEF CON 21の講演をご覧ください： https://www.youtube.com/watch?v=Zuqw0-jZh9Y または、こちらの記事でこの問題の詳細を読むこともできます： https://labs.bishopfox.com/tech-blog/youre-doing-iot-rng 詳細については、個々のデバイスフォルダのREADMEをクリックしてください。...

dcsgonebadge

DEF CON 싱가포르 원 배지 이 프로젝트는 Circuit Crafters의 첫 번째 프로젝트인 전자 하드웨어 배지의 하드웨어 설계를 관리합니다. 이 배지는 마리나 베이 샌즈 엑스포 및 컨벤션 센터에서 열리는 DEF CON 싱가포르 2026 보안 컨퍼런스에서 배포될 예정입니다. 라이선스 이 프로젝트는 CERN Open Hardware Licence Version 2 - Strongly Reciprocal CERN-OHL-S에 따라 라이선스가 부여됩니다. CERN-OHL-S의 조건에 따라 이 프로젝트를 재배포 및 수정할 수...

LiveCTF-DEFCON30

LiveCTF 2022 DEF CON CTF 決勝の LiveCTF イベント向けに、チャレンジ、インフラストラクチャのメモ、ストリーミング設定、その他のバージョン管理された情報を保存するリポジトリです。 LiveCTF で使用されたチャレンジ | チャレンジ名| 対戦チーム| 勝者 ---|---|---|--- ラウンド16: 1| syscall-me-maybe| Shellphish vs PTBWTL| Shellphish ラウンド16: 2| open-to-interpretation| StarBugs vs ./V /home/r/.bin/tw| StarBu...

DC30_Workshop

DEF CON 30 ワークショップ用メインフレームコンテナ このスクリプトは、DEFCON 30 ワークショップ用の MVS 3.8j 仮想メインフレームを構築するために使用します。 DEFCON 30 メインフレームバッファオーバーフローワークショップにご注目いただきありがとうございます。 Docker を使用する この docker コンテナには、MVS バッファオーバーフローを学ぶために必要なものがすべて含まれています。 クラスを開始するには、コンテナを起動して http://localhost:8080 にアクセスしてください。...

DC30-Badge-Challenge-Writeup

DC30-Badge-Challenge-Writeup Table of Contents はじめに チャレンジパート1: メモの収集 チャレンジパート2: YИИEႱに電話する チャレンジパート2A: アリス チャレンジパート2B: ボブ チャレンジパート2C: キャロル チャレンジパート2D: ダン チャレンジパート2E: イブ チャレンジパート2F: トレバー チャレンジパート3: 最後のスレッド カンファレンスで電話を逃した場合は? 余談 はじめに こんにちは! ピート別名 Kybrです。これは DEF CON 30 バッジチャレンジの writeup です。...

EUVD-2021-24584

Malware in sbrugna...

Metasploit Weekly Wrap-Up 08/15/2025

Don’t forget to take the Metasploit User Engagement Survey! We had an awesome time at DEF CON and Black Hat with our very own zeroSteiner and jheysel-r7 presenting on five different occasions! We announced our user engagement survey there, and would love for all of you to participate until the en...

The Booker Prize Longlist and Hacker Summer Camp

Welcome to this week's edition of the Threat Source newsletter. This week the Booker Prize Longlist was released and it featured several books I've read this year a couple that are on my TBR To Be Read, a couple that I had not heard of, and a couple that make me scratch my head and question why...

CVE-2021-38111

The DEF CON 27 badge allows remote attackers to exploit a buffer overflow by sending an oversized packet via the NFMI Near Field Magnetic Induction protocol...

Cybersecurity communities. Small hacker groups, big impact

TL;DR Cybersecurity communities and groups are an excellent opportunity to network and learn There are OWASP, DEF CON, 2600, university hacking societies, Meetup communities and more to choose from They provide workshops, talks, and practical learning opportunities benefiting both newcomers and...

Root Access for Data Control: A DEF CON IoT Village Story

Every year, Rapid7 is a presenter at DEF CON’s IoT Village, sharing in-depth insight and expertise into the hacking of all things Internet of Things. This year, our perennial IoT hacking presenter, Principal Security Researcher, IoT, Deral Heiland, along with Rapid7 pentest team members, showed...

GHSA-WQ9X-QWCQ-MMGF Diesel vulnerable to Binary Protocol Misinterpretation caused by Truncating or Overflowing Casts

The following presentation at this year's DEF CON was brought to our attention on the Diesel Gitter Channel: SQL Injection isn't Dead: Smuggling Queries at the Protocol Level Archive link for posterity. Essentially, encoding a value larger than 4GiB can cause the length prefix in the protocol to...

Researchers Uncover 10 Flaws in Google's File Transfer Tool Quick Share

As many as 10 security flaws have been uncovered in Google's Quick Share data transfer utility for Android and Windows that could be assembled to trigger remote code execution RCE chain on systems that have the software installed. "The Quick Share application implements its own specific...

Metasploit Weekly Wrap-Up 08/09/2024

Black Hat & DEF CON Hopefully folks were able to catch our Rapid7 researchers @zeroSteiner & Jack Heysel show off the Metasploit 6.4's features, focusing on combinations that allow for new, streamlined attack workflows at Black Hat. If not they will also be demoing at DEF CON tomorrow in room W30...

The top stories coming out of the Black Hat cybersecurity conference

Over the next two weeks, two of the largest cybersecurity conferences in the world will take place in Las Vegas: Black Hat and DEF CON. That means product announcements, buzzwords and stories about "X smart appliance could burn your house down!" or something like that. Over the next two weeks, Il...

Windows Downgrade Attack Risks Exposing Patched Systems to Old Vulnerabilities

Microsoft said it is developing security updates to address two loopholes that it said could be abused to stage downgrade attacks against the Windows update architecture and replace current versions of the operating system files with older versions. The vulnerabilities are listed below -...

Metasploit Weekly Wrap-Up 08/02/2024

Metasploit goes to Hacker Summer Camp Next week, Metasploit will have demos at both Black Hat and DEF CON where the latest functionality from this year will be presented. The Black Hat demo will be on Thursday the 8th from 10:10 to 11:25 and the DEF CON demo will be on Saturday the 10th from 12:0...