BSCP-EXAM-GUIDE-BY-N3OARI-2026

README.MD MARCH 2026 This repo contains each cheatsheet along with its respective most important labs. Each topic includes its own cheatsheet/methodology, the most relevant labs, and useful resources. ⭐This is the result of months of work — I hope you find it helpful. If you do, please leave a...

Learn-Web-Hacking

Web Hacking Study Notes 中文版 README Link to notes English Translation Status This English version is a work in progress. The translated table of contents is intended to help readers find topics, but many pages in the English site may still show the original Chinese text. The Chinese files under...

bitcoin-security

bitcoin-security An educational study of where Bitcoin key security actually comes from — and where it doesn't. Built around real BIP39/BIP32 derivation, with two experiments that sit on opposite ends of the same idea: Experiment| Search space| Feasible?| What it teaches ---|---|---|--- weakentro...

xz-utils-backdoor-case-study

XZ Utils Backdoor Technical Case Study — How Maintainer Trust Became a Supply-Chain Execution Path When maintainer trust became the attack path. Overview CASE-002 reconstructs the XZ Utils / liblzma backdoor disclosed on 29 March 2024 as CVE-2024-3094. The report follows the operation from...

OSCP

OSCP OSCP Study Guide Table of Contents Enumeration and Recon Web Enumeration Nikto scanning: nikto -h http://10.10.10.1 Directory busting with different tools: DIRB dirb http://10.10.10.1 Gobuster gobuster dir -u http://10.129.155.74:3000 -w...

nosqli-flintcms

nosqli-flintcms Blind noSQL injection case study lab based on CVE-2018-3783 privilege escalation on flintcms 1.1.9. The vulnerability was originally discovered by Benoit Côté-Jodoin. You can read original report on HackerOne. Prerequisites docker-compose Limitation : We removed sendEmail function...

security-study-plan

A Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps, and so on with free/paid resources, tools, and concepts to excel. It will cover but not limited to: Done 1. Common Skills for Security Study Plan 2. AWS Security...

bitcoder-v2-research

BitCoder-v2 Research Organization: Bytepro AI Status: Active research — private repository Target: arXiv Q3 2026 + ARC Prize Paper Track Nov 2026 Research Objective Empirically document that the single-prompt ceiling observed in mathematical reasoning SAIR, arXiv:2504.18897 replicates in code...

CVE-2025-29927-test

CVE-2025-29927 Verification App We introduced this vulnerability at the 51st Security Study Group for Beginners. The presentation slides are available here. Usage Access the app using one of the methods below. Detailed usage is described on the app's top page. Method 1: Try with a container...

mac0352-ep4

mac0352-ep4 Apache HTTP Server 2.4.23 vulnerability study CVE-2016-8740...

90DaysOfCyberSecurity

90-Day Cybersecurity Study Plan 📚 Table of Contents Introduction Goals and Audience Daily Breakdown Day 1-7: Network+ Concepts Day 8-14: Security+ Concepts Day 15-28: Linux Tutorials Day 29-42: Python Day 43-56: Traffic Analysis Day 57-63: Git Day 64-70: ELK Day 71-77: GCP or AWS or Azure Day...

amlsec

Automated Security Risk Identification in Cyber-Physical Production Systems Using AutomationML-Based Engineering Data This prototype implements the methods presented in the following two publications: 1. Eckhart, M., Ekelhart, A., & Weippl, E. R. 2020. Automated Security Risk Identification Using...

F5-BIG-IP-Remote-Code-Execution-Vulnerability-CVE-2022-1388-A-Case-Study

This repository does not have a README...

Notes

Security Engineering at Google: My Interview Study Notes By nolang I am a security engineer at Google and these are the notes from when I was studying for the interviews. This is my first job in security and a lot of people have asked me how I studied. My notes consist mostly of a list of terms a...

Burp-Suite-Certified-Practitioner-Exam-Study

Burp Suite Certified Practitioner Exam Study This is my study notes with over a 110 PortSwigger Academy Labs. I used these labs to pass the Burp Suite Certified Practitioner Exam 2023. My BSCP qualification. For more informaion go to PortSwigger Academy to get latest learning materials. SCANNING ...

Hacking-Vulnerability-CVE-2020-1938-Ghostcat

Hacking-Vulnerability-case-study-presentations-...

awesome-oscp

Awesome OSCP A curated list of awesome OSCP resources Contents Resources OSCP Reviews and Guides Cheatsheets and Scripts Topics Buffer Overflow Privilege Escalation Active Directory Other OSCP Resources Books License Resources OSCP Reviews and Guides Official OSCP Certification Exam Guide Luke’s...

osed-scripts

osed-scripts bespoke tooling for offensive security's Windows Usermode Exploit Dev course OSED Table of Contents Standalone Scripts egghunter.py find-gadgets.py shellcoder.py install-mona.sh attach-process.ps1 WinDbg Scripts find-ppr.py find-bad-chars.py search.py Standalone Scripts Installation:...

CVE-2024-26230

CVE-2024-26230 All credit goes to k0shl @KeyZ3r0! Summary of Exploit A trick, the story of CVE-2024-26230 DISCLAIMER The exploit is not stable, only use it for study purposes...

CVE-2026-94128

This is a POC for CVE-2026-94128 based on vdem, just for study purpose Compile and run run cargo build and copy CVE-2026-94129.exe to your virtual machine environment then run it in the cmd. the program will automatically get the kernel base address and try to read and write it here is a possible...