subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

Bug_Bounty_writeups

ビギナー向けバグ報奨金はもうやめろ！他人のPoCをコピーするな！違うことをしろ！🔴🔴🔴🔴✔ 私の活動を支援したいですか？ 基礎なしにハッキングを試みるな --- それはあなた自身とあなたの未来にとって危険だ！ 目次...

PMAT-labs

PMAT-labs 🔬 Practical Malware Analysis & Triage コースのラボへようこそ。 🔴 警告 🔴 続行する前に注意深くお読みください。 このリポジトリには、Practical Malware Analysis & Triage PMAT コースで使用するための生のマルウェアサンプルが含まれています。これらのサンプルは、一般的なマルウェアの特性を模倣するために作成されたものか、実際に「野良で捕獲された」実世界のサンプルです。どちらのカテゴリも危険です。これらのサンプルは常に細心の注意を払って取り扱ってください。...

HowToHunt

HowToHunt 汇集了用于漏洞狩猎的实用指南、方法论和资源 来自黑客，回馈社区，因为黑客技术不只是一项技能 更是一种心态 💡 什么是 HowToHunt？ HowToHunt 是一个协作式知识库，汇集了查找特定漏洞的分步指南、方法论和实战技巧。无论你是初学者还是经验丰富的猎人，都能在这里找到有价值的资源来提升你的漏洞挖掘技能。 注意： 本仓库旨在提供实用、可操作的指南，而非理论性知识。每篇指南均由在实战中成功运用过这些技术的经验丰富的猎人贡献。 📖 使用方法 读者 访问我们的 GitBook 获取组织有序、可搜索的阅读体验，所有指南均已按类别妥善整理。 贡献者 1...

GitPython-Exploit-CVE-2022-24439

GitPython-Exploit Pentest práctico...

reverse-engineering-workshop

...

PMD

实战恶意软件开发 练习 1 - 环境搭建 1. 在虚拟机管理程序中设置一台 Windows 虚拟机。 a. 确保对基础安装创建快照。 2. 下载并安装 Visual Studio 2022 - https://visualstudio.microsoft.com/vs/ a. 安装时选择 Desktop development with C++ 工作负载 3. 下载并安装： DebugView++ - https://github.com/CobaltFusion/DebugViewPP PE Bear - https://github.com/hasherezade/pe-bear...

hunt-for-cve-2018-10933

libSSH 認証バイパス CVE-2018-10933 の探索と悪用 libSSH 認証バイパス CVE-2018-10933 の脆弱性を持つホストを発見し、それらを悪用してシェルアクセスを取得する方法を説明する実践ガイド。 以下のブログ記事を参照してください: https://www.marcolancini.it/2018/blog-libssh-auth-bypass/...

Vulnerability-Wiki-PoC

💠 Vulnerability-Wiki-PoC 🚀 Focused on practical applicati...

CVE-2026-52719

An out-of-bounds read vulnerability was found in the VA JPEG decoder in GStreamer's gst-plugins-bad. The JPEG parser reads a segment length value from the bitstream without validating it against available data. A remote attacker could trick a user into opening a specially crafted JPEG file, causi...

openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

A flaw was found in OpenSSL's CMSdecrypt and PKCS7decrypt functions. This vulnerability, a Bleichenbacher-style oracle, could allow a remote attacker to decrypt or sign messages using the victim's private RSA key. Exploitation requires the attacker to provide specially crafted CMS or S/MIME...

Hands-on-Exploitation

No d...

Hunting-Bugs

2026 Practical Bug Bounty Guide Built on real-world experie...

Practical Countermeasure against Attacks Exploiting Detection Efficiency Mismatch in Quantum Key Distribution

We demonstrate a practical countermeasure against a well-known class of attacks on quantum key distribution QKD systems that exploit detection efficiency mismatch, where the receiver's detectors do not exhibit identical responses to incoming photons across all degrees of freedom. This class of...

Best Diagram Software in 2026, Why EdrawMax Works for Everyday Use

Compare top diagram software in 2026 and see why Wondershare EdrawMax can be a practical choice for fast, template rich, AI supported diagramming...

Converging Zero Trust and IoT Security: A Multivocal Literature Review

The convergence of Internet of Things IoT security and Zero Trust ZT principles is a trending topic, demanding a comprehensive, multi-perspective analysis. We present the first multivocal literature review MLR on this topic, combining 68 academic and 36 industrial studies. This comprehensive revi...

Scale Faster: A Practical Guide to Building with Akamai Block Storage

...

Addressing the OWASP Top 10 Risks in Agentic AI with Microsoft Copilot Studio

Agentic AI is moving fast from pilots to production. That shift changes the security conversation. These systems do not just generate content. They can retrieve sensitive data, invoke tools, and take action using real identities and permissions. When something goes wrong, the failure is not limit...

Practical Music Search 访问控制错误漏洞

Practical Music Search is a search tool developed by slicer86, designed to support music information retrieval and content indexing. Version 0.42 of Practical Music Search contains an access control error vulnerability, which stems from a stack buffer overflow. This vulnerability could allow...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2026-1610)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...