domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

Hashcat-Cheatsheet

ورقة غش Hashcat ورقة غش Hashcat لـ OSCP https://hashcat.net/wiki/doku.php?id=hashcat تحديد الهاشات hash-identifier أمثلة على الهاشات: https://hashcat.net/wiki/doku.php?id=examplehashes أقصى طاقة! لقد وجدت أنه يمكنني انتزاع المزيد من الطاقة من تكسير الهاشات بإضافة هذه الوسائط: --force -O -w 4...

Notes

Google पर सुरक्षा इंजीनियरिंग: मेरे साक्षात्कार अध्ययन नोट्स nolang द्वारा मैं Google में एक सुरक्षा इंजीनियर हूँ और ये वो नोट्स हैं जो मैंने साक्षात्कार की तैयारी के दौरान बनाए थे। यह सुरक्षा में मेरी पहली नौकरी है और बहुत से लोगों ने मुझसे पूछा है कि मैंने कैसे पढ़ाई की। मेरे नोट्स मुख्य रूप से...

lightbulb-framework

LightBulb LightBulb is an open source python framework for auditing web application firewalls and filters. Synopsis The framework consists of two main algorithms: GOFA : An active learning algorithm that infers symbolic representations of automata in the standard membership/equivalence query mode...

awesome-appsec-interview

बेहतरीन AppSec साक्षात्कार संसाधनों, अभ्यास प्रश्नों और अध्ययन सामग्री की एक चयनित सूची जो आपको Application Security Engineer साक्षात्कारों की तैयारी में मदद करेगी, जिसे साक्षात्कार प्रकार के अनुसार व्यवस्थित किया गया है। सामग्री साक्षात्कार अवलोकन सुरक्षित कोड समीक्षा ख़तरा मॉडलिंग कोडिंग और...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: iouring: A filename leak was addressed in ioopenatprep. The ioopenatprep function allocates a struct filename using getname. However, if the file is installed in the fixed file table and the OCLOEXEC flag is set, the function...

Security_Engineer_Interview_Questions

أسئلة مقابلات مهندس الأمن قضيت بضع ساعات في ربيع 2016 في تصفح Glassdoor.com لأرى ما نشره المستخدمون من أسئلة أمنية تلقوها خلال مقابلاتهم لوظائف مهندس أمن. دوّنت كل الأسئلة غير المكررة، وهذا ما لديك الآن: أسئلة مقابلات عمل خام. من الواضح أن هذه هي الأسئلة نفسها المطروحة في Google وSalesforce...

The vulnerability of the __tegra_channel_try_format() function in the drivers/staging/media/tegra-video/vi.c file of the Linux kernel’s media data preparation driver allows a hacker to cause a service failure.

The vulnerability of the tegrachanneltryformat function in the drivers/staging/media/tegra-video/vi.c file of the Linux kernel’s media data preparation driver is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

Path-Finding, Orbit State Preparation, and the Security of Invariant Quantum Money

The security of quantum money from knots, and of its generalization to invariant money, is based on the assumption that path-finding, exhibiting a sequence of moves between two equivalent objects, is hard. No proof of security from that assumption alone is known. The existing proofs add...

CVE-2026-97545

A flaw was found in the Linux kernel's XFS file system. When an input/output I/O error occurs while writing cached data buffers to disk during b-tree preparation, the kernel fails to release an allocated buffer. A local user performing file system operations could trigger this condition to leak...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: media: cx88: A null-ptr-deref bug was fixed in the bufferprepare function. When the driver calls cx88riscbuffer to prepare the buffer, the function call may fail, resulting in an empty buffer and a null-ptr-deref later in the...

Astra Linux – Vulnerability in Mariadb 10.3

MariaDB Server versions 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 10.6.17, 10.7 through 10.11 before 10.11.7, 11.0 before 11.0.5, and 11.1 before 11.1.4 have an issue where the fixfieldsifneeded function under mysqlderivedprepare is called when the derived table is not yet prepared,...

Linux Distros Unpatched Vulnerability : CVE-2026-80897

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfs: release readahead folios on iterator preparation failure netfspreparereaditerator batches readahead folios in putbatch so that the folio references can b...

CVE-2026-80897

In the Linux kernel, the following vulnerability has been resolved: netfs: release readahead folios on iterator preparation failure netfspreparereaditerator batches readahead folios in putbatch so that the folio references can be dropped after the I/O iterator has been prepared. If...

CVE-2026-80897 netfs: release readahead folios on iterator preparation failure

In the Linux kernel, the following vulnerability has been resolved: netfs: release readahead folios on iterator preparation failure netfspreparereaditerator batches readahead folios in putbatch so that the folio references can be dropped after the I/O iterator has been prepared. If...

EUVD-2026-71647

In the Linux kernel, the following vulnerability has been resolved: netfs: release readahead folios on iterator preparation failure netfspreparereaditerator batches readahead folios in putbatch so that the folio references can be dropped after the I/O iterator has been prepared. If...

CVE-2026-80897 netfs: release readahead folios on iterator preparation failure

In the Linux kernel, the following vulnerability has been resolved: netfs: release readahead folios on iterator preparation failure netfspreparereaditerator batches readahead folios in putbatch so that the folio references can be dropped after the I/O iterator has been prepared. If...

CVE-2026-80897

CVE-2026-80897 affects the Linux kernel netfs subsystem. In netfs_prepare_read_iterator(), readahead folios are batched in put_batch so that references can be dropped after the I/O iterator is prepared. If rolling_buffer_load_from_ra() fails after earlier folios have been batched, the function re...

Eavesdropper-Blind Remote State Preparation and Applications to Quantum Public-Key Encryption

Remote state preparation RSP is a central primitive in quantum cryptography, enabling classical parties to remotely construct quantum states using only classical communication. As a result, RSP serves as a key building block in numerous protocols involving classical clients and quantum servers,...

CVE-2026-16139

In Progress ShareFile Storage Zones Controller versions = 5.12.5 and = 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote...