Reverse-Engineering

A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures. FREE EMBEDDED HACKING COURSE PROMO HERE Join DC540 Discord HERE Today's Tutorial October 5, 2026 Lesson 316: Embedded Hacking Course Chapter 34: Hacking Dynamic...

readme2demo

readme2demo — README에서 검증된 튜토리얼 및 데모 비디오 ▶ readme2demo가 자신의 튜토리얼을 생성하는 과정: AI 에이전트가 이 리포지토리의 README를 샌드박스에서 읽고, 새로운 컨테이너에서 모든 단계를 다시 실행한 후 데모를 렌더링합니다. 전체 자체 실행 결과는 examples/readme2demo 에서 확인 · 다른 프로젝트에 대해 실행한 결과는 examples/toolhive 에서 확인. AI 검증 튜토리얼 및 데모 비디오 생성기. 리포지토리를 가리키세요. AI 에이전트가 README를 읽고...

Hypervisor-From-Scratch

Hypervisor From Scratch 하이퍼바이저를 처음부터 만드는 튜토리얼 모든 파트 » 파트 1 · 파트 2 · 파트 3 · 파트 4 · 파트 5 · 파트 6 · 파트 7 · 파트 8 분석 및 리버스 엔지니어링 작업에 하이퍼바이저를 사용하려면HyperDbg 디버거를 확인하세요. 이는 애플리케이션의 분석, 퍼징, 리버스 엔지니어링을 위해 특별히 설계된 하이퍼바이저 기반 디버거입니다. 하이퍼바이저 기반 리버스 엔지니어링에 대한 무료 종합 튜토리얼은 OpenSecurityTraining2 웹사이트권장 및 YouTube에서...

gemma_crackme_tutorial

Google의 Gemma 4 E4B 로컬 AI 모델을 사용하여 간단한 Crackme 리버스 엔지니어링하기 저는 Google이 출시한 새로운 Gemma E4B 오픈 가중치 로컬 모델을 가지고 놀던 중, 로컬 오프라인 리버스 엔지니어링 시나리오에서 놀라운 성공을 거두는 것을 보았습니다. 이 튜토리얼을 작성하여 로컬 AI가 이제 많은 기본적인 리버싱 작업에 충분히 좋다는 사실을 알리고, 앞으로 상황이 빠르게 개선될 것이라는 점을 전파하고자 합니다. 리버스 엔지니어링과 AI 새로운 바이너리를 리버싱할 때 가장 지루한 부분 중 하나는...

netstat2neo4j

Netstat Visualization with Neo4j Description Graphs help to spot anomalies and patterns in large datasets. This script takes netstat information from multiple hosts and formats them in a way to make them importable into Neo4j. Neo4j can be queried for find connections to certain hosts, from certa...

owt

Currently unstable will be updated eventually. Offensive Wifi Toolkit owt created by Brennan Mccown clu3bot This tool compiles some necessary tools for wifi auditing in a unix bash script with a user friendly interface. The goal of owt is to have the smallest file size possible while still...

0l4bs

0l4bs Cross-site scripting labs for web application security enthusiasts List of Chall : Chall 1 | URL Chall 2 | Form Chall 3 | User-Agent Chall 4 | Referrer Chall 5 | Cookie Chall 6 | LocalStorage Chall 7 | Login Page Chall 8 | File Upload Chall 9 | Base64 Encoding Chall 10 | Removes Alert Chall...

packer-tutorial

目次 1. パッカーとは何か？ : パッカーの目的の紹介と、パッカーに必要な開発要素についてのガイド。 2. 前提条件 : このチュートリアルで使用するために必要なツール。 3. 実際に試す : このチュートリアルで構築する内容のデモ。 4. CMakeプロジェクトの設計 : パッカーのやや複雑なニーズに合わせたビルドシステムを構築するためのミニCMakeチュートリアル。 5. バイナリをスタブにパックする : パッカー/スタブの組み合わせのうちパッカー部分を書く方法のチュートリアル、およびWindows実行可能ファイル形式の入門。 1. リソースの管理 2. PEファイルの解析 3...

pwndb

pwndb.py pwndb.py is a python command-line tool for searching leaked credentials using the Onion service with the same name. Usage usage: pwndb.py -h --target TARGET --list LIST --output OUTPUT --proxy PROXY optional arguments: -h, --help show this help message and exit --target TARGET Target...

lockphish

Lockphish v2.0 Lockphish it's the first tool 07/04/2020 for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN and iPhone Passcode using a https link. LockPhish Tutorial: https://www.kalilinux.in/2020/05/lockphish.html Author: The Linux Choice Who deleted his...

Malicious code in heft-storybook-v6-react-tutorial-storykit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb5955868f72344703128add3301e3a85b51773de502f24e636fe0b9bba86d42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for Incorrect Authorization in Qualcomm Aqt1000_Firmware

SELinux-Permissive-Only-version-of-Cheese-aka-CVE-2025-21479 T...

A Survey of Web Application Security Tutorials

Developers rely on online tutorials to learn web application security, but tutorial quality varies. We reviewed 132 free security tutorials to examine topic coverage, authorship, and technical depth. Our analysis shows that most tutorials come from vendors and emphasize high-level explanations ov...

Botan C++ Crypto Algorithms Library 3.11.0

Botan is a C++ library of cryptographic algorithms, including AES, DES, SHA-1, RSA, DSA, Diffie-Hellman, and many others. It also supports X.509 certificates and CRLs, and PKCS 10 certificate requests, and has a high level filter/pipe message processing system. The library is easily portable to...

This Week in Spring - March 10th, 2026

Hi, Spring fans! Welcome to another installment of This Week in Spring. As I write this, I am preparing for a trip to Rust, Germany, for one of the best Java conferences in Europe: JavaLand, along with its new companion event, DevLand. It should be fun. Will you be around? If so, say hi. We have ...

CVE-2025-33239

NVIDIA Megatron Bridge contains a vulnerability in a data merging tutorial, where malicious input could cause a code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

Arbitrary Code Injection

Overview megatron-bridge is a Megatron Bridge: Training Recipes for Megatron-based LLM and VLM models Affected versions of this package are vulnerable to Arbitrary Code Injection via the data shuffling tutorial process. An attacker can execute arbitrary code, escalate privileges, disclose sensiti...

Arbitrary Code Injection

Overview megatron-bridge is a Megatron Bridge: Training Recipes for Megatron-based LLM and VLM models Affected versions of this package are vulnerable to Arbitrary Code Injection via the data merging tutorial process. An attacker can execute arbitrary code, escalate privileges, disclose sensitive...

CVE-2025-33240

NVIDIA Megatron Bridge contains a vulnerability in a data shuffling tutorial, where malicious input could cause a code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2025-33239

NVIDIA Megatron Bridge contains a vulnerability in a data merging tutorial, where malicious input could cause a code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...