allsafe-android

Allsafe - Android Una aplicación Android intencionalmente vulnerable para educación en seguridad Características • Capturas de pantalla • Instalación • Desafíos • Contribuir • Soporte 📱 Acerca de Allsafe es una aplicación Android intencionalmente vulnerable diseñada para entusiastas de la...

haaukins

Haaukins Haaukins is a highly accessible and automated virtualization platform for security education, it has three main components Docker, Virtualbox and Golang, the communication and orchestration between the components managed using Go programming language. The main reason of having Go...

haaukins

Haaukins Haaukins es una plataforma de virtualización altamente accesible y automatizada para la educación en seguridad. Tiene tres componentes principales Docker, Virtualbox y Golang. La comunicación y orquestación entre los componentes se gestiona mediante el lenguaje de programación Go. La raz...

SecGen

安全场景生成器 SecGen 摘要 SecGen 创建易受攻击的虚拟机、实验室环境和黑客挑战，以便学生可以学习安全渗透测试技术。 像 Metasploitable2 这样的靶机总是相同的，这个项目使用 Vagrant、Puppet 和 Ruby 来创建随机易受攻击的虚拟机，这些虚拟机可用于学习或托管 CTF 活动。 最新版本可在以下地址获取：http://github.com/cliffe/SecGen/ 请填写一份简短问卷，告诉我们您如何使用 SecGen。 如需托管解决方案，请访问：https://hacktivity.co.uk/ 简介...

Bug-Bounty-Beginner-Roadmap

¡No dudes en contribuir a este repositorio! Roadmap de Bug Bounty para principiantes ¡Hola! Soy Ansh Bhawnani. Actualmente trabajo como ingeniero de seguridad y también soy creador de contenido a tiempo parcial. Estoy creando este repositorio para que todos contribuyan a guiar a las mentes jóvene...

SecurityExplained

Security Explained SecurityExplained es una nueva serie posterior a la serie de desafíos de aprendizaje anterior Learn365. El objetivo de la serie SecurityExplained es crear contenido informativo en múltiples formatos y compartirlo con la comunidad para facilitar la creación de conocimiento y el...

SecGen

EL DESARROLLO SE HA MOVIDO A http://github.com/cliffe/SecGen/, ¡ESTE REPO NO SE MANTIENE Y PROBABLEMENTE NO FUNCIONARÁ! Generador de Escenarios de Seguridad SecGen Resumen SecGen crea máquinas virtuales vulnerables para que los estudiantes puedan aprender técnicas de pruebas de penetración en...

WebGoat v2026.3

WebGoat: A deliberately insecure Web Application Introduction WebGoat is a deliberately insecure web application maintained by OWASP designed to teach web application security lessons. This program is a demonstration of common server-side application flaws. The exercises are intended to be used b...

Exploit for CVE-2026-9082

⚠️ Security Research & Legal Disclaimer 📌 Purpose of This...

Towards Personalizing Secure Programming Education with LLM-Injected Vulnerabilities

According to constructivist theory, students learn software security more effectively when examples are grounded in their own code. Generic examples often fail to connect with students' prior work, limiting engagement and understanding. Advances in LLMs are now making it possible to automatically...

Metasploit-Project

MSF Cloud — Security Exploitation & Education Platform SSEP...

Care that you share

Welcome to this week's edition of the Threat Source newsletter. Back in April, I wrote about the risks of unintentionally leaking information while using search engines. Since then, I've been thinking: Life doesn't just happen in front of a keyboard. There's a social side, too or so I'm told. Wit...

Nanjing Guanbao Technology Development Co., Ltd. safety education and training information system has information leakage vulnerability

Nanjing Tube Bao Technology Development Co., Ltd. is a high-tech enterprise focusing on computer hardware and software research and development, sales, service and system integration. There is an information leakage vulnerability in the security education and training information system of Nanjin...

Our Santa wishlist: Stronger identity security for kids

Sorry for the headline, but we have to get creative to get anyone to read an article on a Friday like this one, even if it is an important story. As we enter the holidays and parents begin to rest after another hectic year of shopping for their kids, Malwarebytes Labs wants to draw some attention...

Exploit for Race Condition in Openbsd Openssh

Khai thác Lỗ hổng OpenSSH CVE-2024-6387 🚀 Một script Python đ...

[Security Nation] Pete Cooper and Irene Pontisso on the Results of the UK Government’s Security Culture Challenge

!\Security Nation\ Pete Cooper and Irene Pontisso on the Results of the UK Government’s Security Culture Challengehttps://blog.rapid7.com/content/images/2022/07/securitynationlogo.jpg In this episode of Security Nation, Jen and Tod are joined again by Pete Cooper and Irene Pontisso of the UK...

Microsoft security experts outline next steps after compromise recovery

Who is CRSP? The Microsoft Compromise Recovery Security Practice CRSP is a worldwide team of cybersecurity experts operating in most countries, across both public and private organizations, with deep expertise to secure an environment post-security breach and to help you prevent a breach in the...

vulhub

This repository is an offensive tool for vulnerability research and exploitation. It contains a collection of vulnerable applications and services, along with proof-of-concept PoC exploits and tools for exploiting them. The repository is maintained by phith0n and is available on GitHub. The...

Kubernetes Security Is Not Container Security

Container-specific security I recently had an interesting discussion with Gianluca Brindisi from Spotify about the differences between Kubernetes security and container security. Typically, the discussion about container security focuses on general questions that aren’t focused on a specific...

Oscar-Bait, Literally: Hackers Abuse Nominated Films for Phishing, Malware

Anticipation surrounding the upcoming 93rd Academy Awards broadcast on Sunday is being used by scammers to trick people into giving up their credentials — they think they’re about to stream Oscar-nominated films, but the reality turns out to be much different. Prior to the winners being announced...