ULTIMATE-CYBERSECURITY-MASTER-GUIDE

🛡️ ULTIMATE CYBERSECURITY MASTER GUIDE Professional Cybersecurity Knowledge Base · Red Team · Blue Team · Purple Team Compiled from 70+ expert books · 90+ PNWC internal documents · custom tools & scripts Abide by theLegal Terms of Use & Disclaimer for the use and misuse of this repository. "Under...

misp-galaxy

misp-galaxy MISP galaxy は、MISP イベントまたは属性に添付できるクラスターと呼ばれる大きなオブジェクトを表現するためのシンプルな方法です。クラスターは 1 つ以上の要素で構成できます。要素はキーと値で表現されます。MISP galaxy にはデフォルトのナレッジベース（Threat Actors、Tools、Ransomware、ATT&CK マトリクスなど）がありますが、これらは必要に応じて上書き、置換、更新、フォーク、共有することができます。 既存のクラスターとボキャブラリーは、そのまま、または共通のナレッジベースとして使用できます。MISP...

CVE-2025-7431

Prueba de concepto – CVE-2025-7431 Knowledge Base = 2.3.1 - Cross-Site Scripting almacenado autenticado Administrador+ a través del slug del plugin CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N ------- 4.4 Resumen de la vulnerabilidad Un atacante autenticado con rol de Administrador puede explotar...

PentestingEverything

PentestingEverything A complete, searchable penetration-testing knowledge base across 23 security domains. Live website: pentesting.m14r41.in Live Website · PentestingChecklist · Contribute · Report an Issue Read it online at pentesting.m14r41.in : fully searchable, with 108 documentation pages,...

RedTeaming-Tactics-and-Techniques

description: - These are notes about all things focusing on, but not limited to, red teaming and offensive security. What is ired.team notes? This is publicly accessible personal red teaming notes at https://ired.team and https://github.com/mantvydasb/RedTeam-Tactics-and-Techniques about my...

Samuraizer

Samuraizer — Cyber‑Security Knowledge Base Engine NotebookLM on steroids — purpose-built for security researchers. 💡 Why Samuraizer? Every security researcher knows the feeling — you find an interesting GitHub repo, a fresh CVE writeup, a blog post about a new exploitation technique. You forward ...

Red-Teaming-TTPs

!CAUTION This repository contains cheatsheets, notes, and scripts related to my learning in cybersecurity, particularly Red Teaming. You'll find a variety of resources that I've compiled over the years, including: Cheatsheets : Quick reference guides for common tools and techniques. Guides :...

altair

ALTAIR - A Modular Web Vulnerability Scanner Copyleft by Simone Margaritelli [email protected] http://www.evilsocket.net - http://www.backbox.org Usage: altair options -u EXAMPLES: altair --filter=lfi,rfi --url=http://www.somesite.com altair --filter=sqli --load-modules=sqlmap...

chipwhisperer

ChipWhisperer | | Important Links Documentation | Tutorials | Forum | Store | NewAE ChipWhisperer 6.0: Repo Changes and Cleanup ChipWhisperer 6.0 is bringing many changes to the ChipWhisperer repository. The biggest one is a cleanup of the git history on both this repo and chipwhisperer-jupyter, ...

enterpriseattack

enterpriseattack - MITREのEnterprise ATT&CK® MITRE ATT&CK Enterpriseデータセットと対話するための軽量Pythonモジュールです。高速で依存関係が最小限であるため、本番アプリケーションでの使用に適しています。詳細についてはドキュメントをお読みください。 MITRE ATT&CK® MITRE...

CamoDocs

CamoDocs EMNLP 2026 論文 CamoDocs: A Poisoning Attack Against Retrieval-Augmented Language Models Using Camouflaged Documents の公式リポジトリです。 CamoDocs は、クエリ包含を必要としない、検索拡張生成（RAG）に対する知識データベースへのポイズニング攻撃です。各敵対的サブ文書は、最適化された良性サブ文書と連結することでカモフラージュされ、その結果得られるポイズニング文書は、フィルタリング防御が依存するクエリ重複の痕跡を回避します。 CamoDocs...

CVE-2026-78606

Incorrect Authorization CWE-863 in Kibana can lead to unauthorized disclosure, modification, and deletion of data via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. Where two authenticated principals originating from different authentication realms share the same username value...

CVE-2026-78606 Incorrect Authorization in Kibana Leading to Unauthorized Disclosure, Modification, and Deletion of Data

Incorrect Authorization CWE-863 in Kibana can lead to unauthorized disclosure, modification, and deletion of data via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. Where two authenticated principals originating from different authentication realms share the same username value...

CVE-2026-78606

CVE-2026-78606 is an incorrect authorization flaw (CWE-863) in Kibana 's Elastic AI Assistant Knowledge Base . When two authenticated principals from different authentication realms share the same username, ACLs fail to properly constrain access, allowing one user to read, modify, and delete the ...

EUVD-2026-69572

Incorrect Authorization CWE-863 in Kibana can lead to unauthorized disclosure, modification, and deletion of data via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. Where two authenticated principals originating from different authentication realms share the same username value...

CVE-2026-78606 Incorrect Authorization in Kibana Leading to Unauthorized Disclosure, Modification, and Deletion of Data

Incorrect Authorization CWE-863 in Kibana can lead to unauthorized disclosure, modification, and deletion of data via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. Where two authenticated principals originating from different authentication realms share the same username value...

Awesome-RCE-techniques

Awesome RCE 技术 在各种应用上实现远程代码执行（RCE）技术的 Awesome 清单！ 项目目标 本项目的目标是提供一个开源知识库，收录在各种应用程序上实现远程代码执行（RCE）的所有技术。所有这些技术还附带一个测试环境（通常是 Docker 镜像），供你练习这些技术。 技术 Content-Management-Systems-CMS/ Drupal ：（3 种技术）/Drupal/ FuelCMS ：（1 种技术）/FuelCMS/ Joomla ：（1 种技术）/Joomla/ SweetRice ：（2 种技术）/SweetRice/ Typo3 ：（1...

Cybersecurity-Handbook

📚 Cybersecurity Handbook A modern, open-source cybersecurity knowledge base designed to help students, professionals, and lifelong learners build practical security skills through structured notes, hands-on labs, and real-world concepts. Built with Quartz • Powered by Markdown • Community Driven ...

Misconfiguration-Manager

Misconfiguration Manager Remediation Quick Start 1. Review the list of known and documented Attack Techniques and corresponding Defense Techniques to identify issues that may be present in your environment and how to remediate them Refer to this introduction to the project 2. Run ConfigManBearPig...

awesome-soc

Awesome SOC An operational handbook and knowledge base to build, run and mature a SOC including CSIRT. Covering: SOC basics detection engineering threat intelligence SOC metrics/KPI SOC automation AI use cases and best practices SOP SOC playbooks Those are my view, based on my own experience as...