Cybersec

Offensive CyberSec Cheat Sheet A highly dynamic, single-file HTML cheat sheet designed for Red Teamers, Pentesters, and CTF players. Tired of typing the same Reverse Shell payloads and constantly replacing your local IP and port? This tool eliminates the "Typo Fatigue" and cognitive load during...

kstg

OWASP KSTG OWASP Kubernetes Security Testing Guide Our Vision Create a comprehensive manual for Kubernetes Cluster Security Assessment We are creating a comprehensive testing guide for Kubernetes cluster security assessment that covers a top down approach to assess the security of a cluster. The...

owasp-istg

OWASP IoT Security Testing Guide The OWASP IoT Security Testing Guide provides a comprehensive methodology for penetration tests in the IoT field offering flexibility to adapt innovations and developments on the IoT market while still ensuring comparability of test results. The guide provides an...

BSCP-EXAM-GUIDE-BY-N3OARI-2026

README.MD MARCH 2026 This repo contains each cheatsheet along with its respective most important labs. Each topic includes its own cheatsheet/methodology, the most relevant labs, and useful resources. ⭐This is the result of months of work — I hope you find it helpful. If you do, please leave a...

redteam-research

红队研究 BlackArrow 红队使用的 PoC 与攻击技术合集 许可证 本项目包含的所有代码均根据 MIT 许可证条款进行许可。...

bug-bounty-library

Bug Bounty / Original Findings Library Folders are numbered in the order a hunter actually works - first to last. Start at 00-hunt/00-INDEX. Run the hunt from 00-hunt/ALPHA. This README is only the map. Authorization only. Safe harbor, VDP, GitHub PVR, or coordinated disclosure. No other-customer...

oscp-notes-2026

OSCP Field Notebook Port-indexed pentest methodology notebook: decision trees, copy-paste command patterns, and lessons from authorized practice boxes HTB / PG / personal labs. Merged from the older finalnotes-vault into this single tree. A workflow you can run under time pressure. Commands and...

security-operations-labs

Security Operations Labs Overview This repository consolidates defensive security work from a university context in a form reworked for public traceability. The focus is on methodology, reproducible labs, validation, and the limitations of the measures developed—not on publishing course material...

tbhm

The Bug Hunter's Methodology TBHM Welcome! This repo is a collection of tips tricks tools data analysis and notes related to web application security assessments and more specifically towards bug hunting in bug bounties. The current sections are divided as follows: Before You Get Hacking Learning...

oscp-notes-2026 — Updated!

OSCP Field Notebook Port-indexed pentest methodology notebook: decision trees, copy-paste command patterns, and lessons from authorized practice boxes HTB / PG / personal labs. Merged from the older finalnotes-vault into this single tree. A workflow you can run under time pressure. Commands and...

CVE-2026-41940

CVE-2026-41940 ✅ Script analysis what the scanner does and how ✅ Root cause technical explanation the CRLF/Session.pm diff ✅ Prevention — patch commands, secure coding lessons ✅ Mitigation — firewall rules, WAF config, hardening ✅ IOC hunting — detecting if you were already hit ✅ VaPT methodology...

HTB-Writeups

Hack The Box Writeups This repository contains my Hack The Bo...

EUVD-2026-46966

Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft component: Institutional Methodology Need Analysis. The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

CVE-2026-60608

Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft component: Institutional Methodology Need Analysis. The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

vulnerability-assessment-metasploitable2

Vulnerability Assessment — Metasploitable 2 A end-to-end vuln...

MARCIM-WG: A Cyber Wargame Proposal Based on Math Modeling Applied in a Naval Scenario

As maritime operations increasingly depend on interconnected digital ecosystems, cyber incidents can propagate across maritime networks and degrade critical services. Strengthening strategic Cyber Situational Awareness CSA therefore requires training mechanisms that expose decision-makers to...

write-up

Prototype Pollution in JavaScript: The Complete Bug Bounty Hun...

A New Framework for Cybersecurity Refusals in AI Agents

Agentic scaffolds have dramatically improved LLM performance on complex, long-horizon tasks, yielding both broad benefits and amplified risks in domains like cybersecurity. Existing benchmarks for AI agents in cybersecurity focus mainly on measuring proficiency--how effectively agents can complet...

SWPT-Notes

SWPT-Notes Personal study notes compiled while working throug...

Innovations in Cardless Artificial Intelligence Banking: A Comprehensive Framework for Cyber Secure and Fraud Mitigation Using Machine Learning Algorithms

The advent of cardless artificial intelligence AI banking heralds a paradigm shift in the financial landscape, offering users unprecedented security and convenience. This paper outlines a comprehensive framework designed to enhance cybersecurity, introduce auto-generated virtual cards, and mitiga...