385 matches found
PMAT-labs
PMAT-labs 🔬 مرحبًا بك في مختبرات دورة تحليل البرامج الضارة العملية والفرز. 🔴 تحذير 🔴 اقرأ هذا بعناية قبل المتابعة. يحتوي هذا المستودع على عينات برامج ضارة حية لاستخدامها في دورة تحليل البرامج الضارة العملية والفرز PMAT. هذه العينات إما كُتبت لتقليد خصائص البرامج الضارة الشائعة أو هي عينات حية من...
Bug_Bounty_writeups
توقف عن الصدقات المكافآت - توقف عن نسخ إثباتات الآخرين! افعل شيئًا مختلفًا!🔴🔴🔴🔴✔ هل تريد دعم عملي؟ لا تحاول الاختراق بدون الأساسيات --- سيكون خطيرًا عليك وعلى مستقبلك! المحتويات...
hunt-for-cve-2018-10933
البحث عن واستغلال تجاوز المصادقة في libSSH CVE-2018-10933 دليل عملي يشرح كيفية إيجاد المضيفين المعرضين لتجاوز المصادقة في libSSH CVE-2018-10933 وكيفية استغلالهم للحصول على وصول شل. يرجى الرجوع إلى المقالة التالية للحصول على التعليمات: https://www.marcolancini.it/2018/blog-libssh-auth-bypass/...
HowToHunt
HowToHunt Сборник практических руководств, методологий и ресурсов для поиска уязвимостей От хакеров для сообщества, потому что взлом — это не просто навык Это образ мышления 💡 Что такое HowToHunt? HowToHunt — это совместный репозиторий пошаговых руководств, методологий и практических техник для...
PMD
Développement pratique de malwares Exercice 1 - Configuration de l'environnement 1. Configurez une machine virtuelle Windows dans un hyperviseur. a. Assurez-vous de prendre un instantané de votre installation de base. 2. Téléchargez et installez Visual Studio 2022 -...
GitPython-Exploit-CVE-2022-24439
GitPython-Exploit Практический пентест...
subjack
subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...
CVE-2026-52719
An out-of-bounds read vulnerability was found in the VA JPEG decoder in GStreamer's gst-plugins-bad. The JPEG parser reads a segment length value from the bitstream without validating it against available data. A remote attacker could trick a user into opening a specially crafted JPEG file, causi...
openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()
A flaw was found in OpenSSL's CMSdecrypt and PKCS7decrypt functions. This vulnerability, a Bleichenbacher-style oracle, could allow a remote attacker to decrypt or sign messages using the victim's private RSA key. Exploitation requires the attacker to provide specially crafted CMS or S/MIME...
Hands-on-Exploitation
No d...
Hunting-Bugs
2026 Practical Bug Bounty Guide Built on real-world experie...
Practical Countermeasure against Attacks Exploiting Detection Efficiency Mismatch in Quantum Key Distribution
We demonstrate a practical countermeasure against a well-known class of attacks on quantum key distribution QKD systems that exploit detection efficiency mismatch, where the receiver's detectors do not exhibit identical responses to incoming photons across all degrees of freedom. This class of...
Best Diagram Software in 2026, Why EdrawMax Works for Everyday Use
Compare top diagram software in 2026 and see why Wondershare EdrawMax can be a practical choice for fast, template rich, AI supported diagramming...
Converging Zero Trust and IoT Security: A Multivocal Literature Review
The convergence of Internet of Things IoT security and Zero Trust ZT principles is a trending topic, demanding a comprehensive, multi-perspective analysis. We present the first multivocal literature review MLR on this topic, combining 68 academic and 36 industrial studies. This comprehensive revi...
Scale Faster: A Practical Guide to Building with Akamai Block Storage
...
Addressing the OWASP Top 10 Risks in Agentic AI with Microsoft Copilot Studio
Agentic AI is moving fast from pilots to production. That shift changes the security conversation. These systems do not just generate content. They can retrieve sensitive data, invoke tools, and take action using real identities and permissions. When something goes wrong, the failure is not limit...
Practical Music Search 访问控制错误漏洞
Practical Music Search is a search tool developed by slicer86, designed to support music information retrieval and content indexing. Version 0.42 of Practical Music Search contains an access control error vulnerability, which stems from a stack buffer overflow. This vulnerability could allow...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2026-1610)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...