PwnzzAI

🍕 Bienvenido a PwnzzAI/pəʊnzɑː/ Shop – ¡La Pizzería Vulnerable! 💻 En PwnzzAI Shop, cada rebanada ofrece una dosis de instrucción holística de seguridad en IA. Esta plataforma práctica de aprendizaje prepara a los profesionales para comprender la protección de las tecnologías de IA en general ,...

workshop_firmware_reverse_engineering

Workshop: Firmware Reverse Engineering This repository contains slides and hands-on materials for Emproof's workshop on firmware reverse engineering, presented at ScapyCon Automotive 2025. The workshop targets a technical audience with minimal security experience and teaches the fundamentals...

flare-learning-hub

FLARE Centro de Aprendizaje El FLARE Centro de Aprendizaje distribuye gratuitamente contenido educativo de alta calidad sobre ingeniería inversa y análisis de malware del equipo FLARE. Los módulos del FLARE Centro de Aprendizaje están alojados como documentos de Google publicados en la web,...

freebsd_kernel_hacking

Hacking del Kernel de FreeBSD Ejercicios de Joseph Kong's Designing BSD Rootkits, actualizados para FreeBSD 11/12. Aunque el libro tiene más de 10 años, es muy recomendable ya que es un desafío considerable actualizar el código fuente proporcionado en el libro para que funcione en versiones...

nccfsas

Introduction This repository holds information released publicly by NCC Group's Full Spectrum Attack Simulation FSAS team...

jwt_tool

The JSON Web Token Toolkit v2 jwttool.py is a toolkit for validating, forging, scanning and tampering JWTs JSON Web Tokens. Its functionality includes: Checking the validity of a token Testing for known exploits: CVE-2015-2951 The alg=none signature-bypass vulnerability CVE-2016-10555 The RS/HS25...

T3SF

T3SF 技术桌面演练模拟框架 目录 关于 准备工作 待办事项 更新日志 贡献指南 关于 T3SF 是一个框架，提供基于主场景事件列表（MSEL）的事件编排模块化结构，以及为每次演练定义的规则集（可选）和允许定义相应平台参数的配置。主模块负责与特定模块（Discord、Slack、Telegram 等）通信，使事件能够以注入的形式呈现在各平台的输入频道中。此外，该框架支持不同的用例：“单一组织、多个领域”、“多个组织、单一领域”以及“多个组织、多个领域”。 准备工作 要使用该框架与您选择的平台（无论是 Slack 还是...

vapi

vAPI...

security-writeups

Security Writeups Informes y scripts de estilo didáctico de los CTF rooms y ejercicios de laboratorio que he realizado, principalmente TryHackMe y PortSwigger. Cada carpeta incluye un "teaching version" script en el que he dejado deliberadamente los valores clave en blanco. Si los rellenas a part...

training-application-security

Free Secure Coding & Application Security Training — Open Source SCORM Exercises 40 free, open-source secure coding exercises that teach web application security the way developers learn — by exploiting real vulnerabilities like SQL injection, cross-site scripting XSS, and broken access control,...

DarthSidious

Darth Sidious 目标很简单 分享我在攻击Windows系统方面的粗浅知识。这通常被称为红队演练。不过，本书也非常关注蓝队——防御者。也就是说，帮助那些从事防御、分析和安全专家工作的人，构建安全的Active Directory环境，并监控其中的恶意活动。 本书包含三个主要部分 1. 搭建实验环境 2. 攻击它 3. 防御它 我安排本书的结构，以便读者可以大致按顺序阅读。要实践其中的许多内容，实验环境是必需的。因此，我编写了几个指南，介绍如何搭建不同规模和复杂程度的实验环境。 入门 入门指南 获取源代码 本书的源代码托管在本书的GitHub仓库中。 更新日志 日期| 作者| 内...

training-security-awareness

Free Security Awareness Training for Employees — Open Source Interactive SCORM Library 130+ free, open-source security awareness training exercises for employees — hands-on, interactive SCORM modules covering phishing awareness training, phishing simulation, GDPR training, EU AI Act compliance, A...

Technology-Enhanced Tabletop Exercises for Cybersecurity Education: Lessons Learned

This innovative practice full paper examines the integration of technology-enhanced tabletop exercises TTXs into computing education, focusing on cybersecurity curricula. The motivation is to better prepare students for complex, collaborative problem solving typical of incident response and IT...

CVE-2026-7553

A vulnerability was found in code-projects Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/editexercises.php. The manipulation of the argument editexercise results in sql injection. It is possible to launch the attack remotely. The exploit...

CVE-2026-7553

A vulnerability was found in code-projects Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/editexercises.php. The manipulation of the argument editexercise results in sql injection. It is possible to launch the attack remotely. The exploit...

CVE-2026-7553

CVE-2026-7553 affects code-projects Gym Management System 1.0. The vulnerability resides in the file /admin/edit_exercises.php where manipulation of the argument edit_exercise enables a SQL injection. The issue is exploitable remotely and an exploit has been made public (Exploit maturity: PROOF-O...

EUVD-2026-26478

A vulnerability was found in code-projects Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/editexercises.php. The manipulation of the argument editexercise results in sql injection. It is possible to launch the attack remotely. The exploit...

PT-2026-36298

A vulnerability was found in code-projects Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/edit exercises.php. The manipulation of the argument edit exercise results in sql injection. It is possible to launch the attack remotely. The exploi...

Code-Projects Gym Management System 注入漏洞

Code-Projects Gym Management System is an open-source gym management system developed by Code-Projects. Version 1.0 of the Code-Projects Gym Management System has a vulnerability related to SQL injection, which arises from incorrect handling of parameters in the file admin/editexercises.php,...

Brushstrokes and breaches with Terryn Valikodath

Cisco Talos is kicking off the new year with a behind-the-scenes look at incident response through the eyes of Terryn Valikodath, Senior Incident Response Consultant at Talos. In this episode, Amy sits down with Terryn to explore the realities of a job that blends technical know-how with...