SecurityShepherd

OWASP Security Shepherd OWASP Security Shepherd Project는 웹 및 모바일 애플리케이션 보안 교육 플랫폼입니다. Security Shepherd는 다양한 기술 수준의 사용자 집단에서 보안 인식을 함양하고 향상시키기 위해 설계되었습니다. 이 프로젝트의 목표는 AppSec 초보자나 경험 많은 엔지니어가 침투 테스트 기술을 연마하여 보안 전문가 수준에 도달하도록 돕는 것입니다. Security Shepherd는 어디서 다운로드할 수 있나요? 가상 머신 또는 수동 설치 GitHub에서...

SecureCodingDojo

Secure Coding Dojo 소개 Secure Coding Dojo는 안전한 코딩 교육을 제공하기 위한 플랫폼입니다. 자체적으로 취약한 훈련용 애플리케이션Insecure.Inc 웹사이트이 포함되어 있지만, 훈련 포털은 다른 훈련용 애플리케이션과 함께 사용할 수도 있습니다. 이 플랫폼의 강점은 확장성과 널리 사용되는 개발 협업 플랫폼인 Slack과의 통합입니다. 훈련 포털은 클라우드에 쉽게 구축할 수 있으며, AWS Elastic Beanstalk 설정 지침은 아래에서 확인할 수 있습니다. Dojo 배포 및 설치에 대한 자...

PwnzzAI

🍕 PwnzzAI/pəʊnzɑː/ 샵에 오신 것을 환영합니다 – 취약한 피자 가게! 💻 PwnzzAI 샵에서는 모든 조각이 포괄적인 AI 보안 교육 을 제공합니다. 이 실습형 학습 플랫폼은 전문가들이 AI 기술을 광범위하게 보호하는 방법을 이해할 수 있도록 준비시키며, 매력적이고 실용적인 피자 가게 시나리오를 통해 제공됩니다. 잘못된 재료가 피자를 망칠 수 있듯이, 결함이 있는 프롬프트나 부적절한 아키텍처는 AI 기술을 정보 유출, 지적 재산 도난, 또는 불법 접근을 포함한 심각한 위협에 노출시킬 수 있습니다. 여기서 여러분은...

exp-labs

exp-labs Cybersecurity Training Platform This modern web secu...

CVE-2025-3410

A vulnerability classified as critical was found in mymagicpower AIAS 20250308. This vulnerability affects unknown code of the file trainingplatform/train-platform/src/main/java/top/aias/training/controller/LocalStorageController.java. The manipulation of the argument File leads to unrestricted...

The vulnerability of the Iced training platform’s classes allows a hacker to execute arbitrary code.

The vulnerability of the Iced training platform for machine learning H2O is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

SAP Enable Now Code Issue Vulnerability

SAP Enable Now is a collaborative content creation, management and sharing platform from SAP. The platform is primarily used for e-learning and training in SAP and non-SAP systems. SAP Enable Now suffers from a code issue vulnerability that stems from an unimplemented X-FRAME-OPTIONS response...

Malicious code in training-platform-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 379e8de1999ec8549c82a99e55a439a22fba37f2c10ec080e8c355a42252b7aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6634 Malicious code in training-platform-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 379e8de1999ec8549c82a99e55a439a22fba37f2c10ec080e8c355a42252b7aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for SQL Injection in Zabbix

This is an offensive tool repository for Vulhub, a web application vulnerability training platform. The repository contains various tools and exploits for testing and demonstrating vulnerabilities in different web applications and frameworks. The primary classification of this repository is: "It ...

SQL Injection Vulnerability in Residency Standardized Training Platform of Chongqing Yuanqiu Technology Co.

Residency standardized training platform is a large-scale residency training platform for basic education, clinical guidance, assessment and training of residents in one. A SQL injection vulnerability exists in the residency training platform of Chongqing Yuanqiu Technology Co. An attacker can...

Arbitrary file reading vulnerability in the accounting training platform of Xiamen NetZhong.com Software Co.

Ltd. is a high-tech enterprise specializing in the development, service and sales of teaching software products for teaching accounting. Xiamen NetZhongNET Software Co., Ltd. accounting training teaching platform there is an arbitrary file reading vulnerability, attackers can use the vulnerabilit...

File Uploading Vulnerability in the Web-based Training Platform of Beijing Boswell Information Technology Co.

Ltd. is one of the "one-stop" providers of e-learning, online examination and knowledge management software products and their total solutions. A file upload vulnerability exists in the online training platform of Beijing Boshiway Information Technology Co., Ltd, which can be exploited by attacke...

SQL Injection Vulnerability in Betten's Innovation and Entrepreneurship Training Platform System

Hangzhou Berten Technology Co., Ltd. is a leading manufacturer of innovation and entrepreneurship practice education in China, and currently has more than 30 offices or branches across the country. There is a SQL injection vulnerability in the Beiten Innovation and Entrepreneurship Practical...

U.S. Dept Of Defense: Online training material disclosing username and password

Summary: A training document is revealing username and password details for what appears to be a DoD training system Description: Using the google dork site:.mil ext:ppt intext:password, I was able to find a number of powerpoint documents on .mil websites that include username and passwords. This...

Study Vulnerability Assessment in Tenable University for free

Not so long ago, Tenable presented renewed online training platform - Tenable University. It is publicly available even for non-customers, for example, for Nessus Home users. However, not all courses are available in this case. I decided to check it out, registering as non-customer. Logged in...

Mobile Application Security Training Platform: Security Shepherd

The OWASP Security Shepherd project is a web and mobile application security training platform. Security Shepherd has been designed to foster and improve security awareness among a varied skill-set demographic. The aim of this project is to take AppSec novices or experienced engineers and sharpen...

OWASP Security Shepherd - Web And Mobile Application Security Training Platform

The OWASP Security Shepherd Project is a web and mobile application security training platform. Security Shepherd has been designed to foster and improve security awareness among a varied skill-set demographic. The aim of this project is to take AppSec novices or experienced engineers and sharpen...

SQL Injection Vulnerability in Teacher Training Platform of Zibo Kuanzheng Digital Network Technology Co.

Teacher training platform is a teaching system developed by Zibo Kuanzheng Digital Network Technology Co. A SQL injection vulnerability exists in the Teacher Training Platform of Zibo Kuanzheng Digital Network Technology Co. Ltd, which allows attackers to exploit this vulnerability to obtain...