security-operations-labs

Security Operations Labs Обзор В этом репозитории собраны работы по защитной безопасности из университетского контекста, переработанные в форму, пригодную для публичного воспроизведения. В центре внимания — методология, воспроизводимые лабораторные работы, валидация и границы разработанных мер, а...

richkit

Richkit Richkit is a python3 package that provides tools taking a domain name as input, and returns addtional information on that domain. It can be an analysis of the domain itself, looked up from data-bases, retrieved from other services, or some combination thereof. The purpose of richkit is to...

CVE-2015-0235-test

CVE-2015-0235-test Плейбук Ansible для проверки уязвимости CVE-2015-0235. Он основан на тестовой программе, предоставленной Чикагским университетом ссылка. Ansible позволяет указать большое количество хост-машин для одновременного тестирования. Он не вносит исправлений и ничего не перезагружает ,...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

uoftctf-2025-chals-public

Конкурс Capture the Flag Университета Торонто 2025 Этот репозиторий содержит решения задач, представленных на UofTCTF 2025. Исходный код также включён в большинство директорий с задачами. Задачи Название задачи| Количество решений| Категория ---|---|--- Забавный шифр| 231/1510| Крипто Зачарованны...

recox

Recox v2.0 RecoX is an incredibly versatile and powerful tool that is specifically designed to aid in the identification and classification of vulnerabilities within web applications. The script is able to detect vulnerabilities that are not typically included in the OWASP top ten vulnerabilities...

Spectre-Vulnerability-CVE-2017-5753-

Spectre-Vulnerability-CVE-2017-5753- يحتوي هذا المستودع على تقرير حول ثغرة Specre وتفاصيل حول استغلال الثغرة. تم اقتباس إثبات المفهوم المستخدم لهذا الغرض من مستودع GitHub https://github.com/Eugnis/spectre-attack . في الأصل، كان الكود مأخوذاً من تقرير صادر عن Graz University of technology...

Cappriciosec-University

📚 Cappriciosec University – भारत का पहला हैकर ई-लर्निंग प्लेटफ़ॉर्म Cappriciosec University हैकर्स, साइबर सुरक्षा शुरुआती और बग बाउंटी हंटर्स के लिए भारत का पहला ई-लर्निंग प्लेटफ़ॉर्म है। हमारा ध्यान एथिकल हैकिंग, पेनेट्रेशन टेस्टिंग, IoT हैकिंग, साइबर क्राइम जांच और उन्नत बग बाउंटी प्रोग्राम पर...

lava

LAVA: Large Scale Automated Vulnerability Addition Evaluating and improving bug-finding tools is currently difficult due to a shortage of ground truth corpora i.e., software that has known bugs with triggering inputs. LAVA attempts to solve this problem by automatically injecting bugs into...

cve-2021-44228

cve-2021-44228 Questo è l'archivio del compito di metà semestre per "Analisi delle Vulnerabilità" terzo anno, autunno-inverno dell'Università di Anhui. Il documento completo si trova su https://testgames.me/2024/11/10/cve-2021-44228/...

SecureOps-Lab

SecureOps Lab - Live-Cybersicherheitsbewertung Übersicht Es wurde eine Live-Cybersicherheitsbewertung auf einem Linux-Server einer Universität durchgeführt. Während der Analyse wurden aktive Angriffsaktivitäten identifiziert, darunter Brute-Force-Authentifizierungsversuche und Exploit-Versuche...

Multimodal-web-attack-Dataset

MWAD : un jeu de données multimodal d'attaques web pour la détection d'injections SQL par IA Vue d'ensemble Le jeu de données multimodal d'attaques web MWAD est un jeu de données de cybersécurité inédit et étiqueté, développé dans le cadre des recherches de l'auteur en cybersécurité à l'Universit...

pharos

Pharos Static Binary Analysis Framework The Pharos static binary analysis framework is a project of the Software Engineering Institute at Carnegie Mellon University. The framework is designed to facilitate the automated analysis of binary programs. It uses the ROSE compiler infrastructure develop...

Technology-Enhanced Tabletop Exercises for Cybersecurity Education: Lessons Learned

This innovative practice full paper examines the integration of technology-enhanced tabletop exercises TTXs into computing education, focusing on cybersecurity curricula. The motivation is to better prepare students for complex, collaborative problem solving typical of incident response and IT...

New Agent Data Injection Attack Can Make AI Agents Misclick or Run Attacker Commands

Ask an AI agent to summarize the reviews on a product page, and a single planted review can make it click "Buy Now" instead. Ask a coding assistant to apply a maintainer's fix from a GitHub thread, and a fake comment can make it run a stranger's command on your computer. Neither trick hijacks the...

WordPress All-in-One Video Gallery plugin <= 4.8.5 - Authenticated (Subscriber+) Server-Side Request Forgery vulnerability

Authenticated Subscriber+ Server-Side Request Forgery vulnerability discovered by KoreaInfoSec - Korea University in WordPress Plugin All-in-One Video Gallery versions = 4.8.5...

GitHub 'Verified' Commits Can Be Rewritten Into New Hashes Without Breaking Signatures

New research shows that a signed Git commit's hash is not the one-of-a-kind name that much of the software world assumes it to be. Given any signed commit, someone without the signing key can mint a second commit with the same files, author, and date, and a valid signature, GitHub still stamps...

PYSEC-2026-951 Overflow in `ImageProjectiveTransformV2`

Impact When tf.rawops.ImageProjectiveTransformV2 is given a large output shape, it overflows. python import tensorflow as tf interpolation = "BILINEAR" fillmode = "REFLECT" images = tf.constant0.184634328, shape=2,5,8,3, dtype=tf.float32 transforms = tf.constant0.378575385, shape=2,8,...

Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities

A suspected China-aligned threat activity cluster has been observed exploiting Roundcube webmail software belonging to physics and engineering departments of U.S. and Canadian universities as part of a new campaign. The activity involves the exploitation of now-patched, critical security flaws in...

SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing

Scanners meant to catch malicious add-on "skills" for AI coding agents can be fooled by a few simple changes that leave the malware working, according to a new study from researchers at the Hong Kong University of Science and Technology. Their strongest trick slipped past every scanner tested mor...