subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

HowToHunt

HowToHunt Una colección de guías prácticas, metodologías y recursos para cazar vulnerabilidades De Hackers para la Comunidad, porque el Hacking no es solo una habilidad Es una Mentalidad 💡 ¿Qué es HowToHunt? HowToHunt es un repositorio colaborativo de guías paso a paso, metodologías y técnicas...

PMAT-labs

PMAT-labs 🔬 欢迎来到《实用恶意软件分析与分类》实验手册。 🔴 警告 🔴 请仔细阅读以下内容。 本仓库包含用于《实用恶意软件分析与分类》（PMAT）课程的活跃恶意软件样本。这些样本有的是为模拟常见恶意软件特征而编写，有的则是真实世界的“野外捕获”样本。两类样本均具有危险性。任何时候都必须极其谨慎地处理这些样本。 请勿将样本下载至您不拥有的计算机。 请勿在您不拥有的计算机上执行任何样本。 请勿在无法恢复至已保存状态的环境中（例如虚拟机）下载和/或执行这些样本。 使用这些样本时，始终遵循安全的恶意软件处理程序。...

Bug_Bounty_writeups

停止做乞讨式的赏金 - 停止复制他人的POC！做点不一样的事情！🔴🔴🔴🔴✔ 想支持我的工作吗？ 没有基础不要尝试黑客攻击——这对你和你的未来都很危险！ 目录 跨站脚本攻击 XSS 跨站请求伪造 CSRF 点击劫持 UI 重定向攻击 本地文件包含 LFI 子域名接管 拒绝服务 DOS 认证绕过 SQL注入 不安全的直接对象引用 IDOR 2FA相关问题 CORS相关问题 服务端请求伪造 SSRF 竞态条件 远程代码执行 RCE Android渗透测试 贡献 维护者...

GitPython-Exploit-CVE-2022-24439

GitPython-Exploit Pentest práctico...

reverse-engineering-workshop

...

PMD

Desarrollo Práctico de Malware Ejercicio 1 - Configuración del Entorno 1. Configura una máquina virtual de Windows dentro de un hipervisor. a. Asegúrate de tomar una instantánea de tu instalación base. 2. Descarga e instala Visual Studio 2022 - https://visualstudio.microsoft.com/vs/ a. Selecciona...

hunt-for-cve-2018-10933

搜寻并利用 libSSH 身份验证绕过漏洞 CVE-2018-10933 实用指南，讲解如何发现受 libSSH 身份验证绕过漏洞 CVE-2018-10933 影响的主机，以及如何利用该漏洞获取 Shell 访问权限。 请参阅以下博文获取操作说明：https://www.marcolancini.it/2018/blog-libssh-auth-bypass/...

Vulnerability-Wiki-PoC

💠 Vulnerability-Wiki-PoC 🚀 Focused on practical applicati...

CVE-2026-52719

An out-of-bounds read vulnerability was found in the VA JPEG decoder in GStreamer's gst-plugins-bad. The JPEG parser reads a segment length value from the bitstream without validating it against available data. A remote attacker could trick a user into opening a specially crafted JPEG file, causi...

openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

A flaw was found in OpenSSL's CMSdecrypt and PKCS7decrypt functions. This vulnerability, a Bleichenbacher-style oracle, could allow a remote attacker to decrypt or sign messages using the victim's private RSA key. Exploitation requires the attacker to provide specially crafted CMS or S/MIME...

Hands-on-Exploitation

No d...

Hunting-Bugs

2026 Practical Bug Bounty Guide Built on real-world experie...

Practical Countermeasure against Attacks Exploiting Detection Efficiency Mismatch in Quantum Key Distribution

We demonstrate a practical countermeasure against a well-known class of attacks on quantum key distribution QKD systems that exploit detection efficiency mismatch, where the receiver's detectors do not exhibit identical responses to incoming photons across all degrees of freedom. This class of...

Best Diagram Software in 2026, Why EdrawMax Works for Everyday Use

Compare top diagram software in 2026 and see why Wondershare EdrawMax can be a practical choice for fast, template rich, AI supported diagramming...

Converging Zero Trust and IoT Security: A Multivocal Literature Review

The convergence of Internet of Things IoT security and Zero Trust ZT principles is a trending topic, demanding a comprehensive, multi-perspective analysis. We present the first multivocal literature review MLR on this topic, combining 68 academic and 36 industrial studies. This comprehensive revi...

Scale Faster: A Practical Guide to Building with Akamai Block Storage

...

Addressing the OWASP Top 10 Risks in Agentic AI with Microsoft Copilot Studio

Agentic AI is moving fast from pilots to production. That shift changes the security conversation. These systems do not just generate content. They can retrieve sensitive data, invoke tools, and take action using real identities and permissions. When something goes wrong, the failure is not limit...

Practical Music Search 访问控制错误漏洞

Practical Music Search is a search tool developed by slicer86, designed to support music information retrieval and content indexing. Version 0.42 of Practical Music Search contains an access control error vulnerability, which stems from a stack buffer overflow. This vulnerability could allow...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2026-1610)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...