XPRTestSuite

XProtect Remediator Test Suite A collection of scripts and documents to help future XProtect Remediator XPR research, presented at Black Hat USA 2025 About This Repository This repository contains: The scripts to create harmless minimal files and processes that reproduce the remediation of each...

antisquat

AntiSquat AntiSquat leverages AI techniques such as natural language processing NLP, large language models ChatGPT and more to empower detection of typosquatting and phishing domains. How to use Clone the project via git clone https://github.com/redhuntlabs/antisquat. Install all dependencies by...

DakshSCRA

Daksh SCRA Source Code Review Assist root@kitploit: Author: - Debasis Mohanty [email protected] - Twitter / X: @coffeensecurity - www.coffeeandsecurity.com About Daksh SCRA Daksh SCRA Source Code Review Assist is built to enhance the efficiency of the source code review process, providing a...

slides

スライド Hack Different: Z世代のバグでiOS 14を攻略する BlackHat USA 2021 Zhi Zhou@CodeColorist, Jundong Xie @Jdddong 論文 録画 パロディ See No Eval: Objective-Cにおけるランタイム動的コード実行 RWCTF 2021 Zhi Zhou@CodeColorist Cross-Site Escape: 変わった方法でmacOS Safariサンドボックスを攻略する BlackHat EU 2020 Zhi Zhou@CodeColorist I Want to Break Free...

crlf-desyncs

CRLF Desyncs これは、BlackHat USA 2026 および DEFCON 34 で発表された、CRLFベースのDesyncを検出・悪用するための便利なツールとリソースを含むリポジトリです。 目次 cdn-origin/ - レスポンスに対するCRLFインジェクションのファジングに有用な、オリジンからエッジへの集約ヘッダーが含まれています。 nuclei-templates/ - CRLFインジェクションを大規模に検出するのに役立つnucleiテンプレートのコレクション。 cookier.py - CRLFベースのcookie...

cdf

CDF – crypto differential fuzzing CDF is a tool to automatically test the correctness and security of cryptographic software. CDF can detect implementation errors, compliance failures, side-channel leaks, and so on. CDF implements a combination of unit tests with "differential fuzzing", an approa...

Blackhat-USA-2022-Materials

Black Hat USA 2022 プレゼンテーション資料 Black Hat USA 2022 Briefing および Arsenal 講演のプレゼンテーション資料 Black Hat USA Briefing - ソースを制御する: ソースコード管理システムの悪用 説明 https://blackhat.com/us-22/briefings/schedule/controlling-the-source-abusing-source-code-management-systems-26423 プレゼンテーション資料 プレゼンテーションのスライドと録画されたデモは、このリポジトリ...

BLACKHAT_USA2022

BLACKHATUSA2022 BLACKHAT USA2022 PDF Publicについて release またはこちらの mirror からダウンロード ファイル一覧。興味のあるものを検索してください。 root@kitploit: ├── BLACKHATUSA2022 │ ├── Taking Kerberos To The Next Level.pdf │ ├── US-22-ABDELLATIF-Unlimited-Results-Breaking-Firmware-Encryption.pdf │ ├──...

de4dot

Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...

Black Hat USA: TP-Link Flaws Put Omada Controllers and Camera Feeds at Risk

Forescout disclosed 15 TP-Link flaws at Black Hat USA 2026 that could expose Omada credentials and VPN keys, allow internal access and affect VIGI camera feeds...

LG to Ban Residential Proxies from Smart TV Apps

The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one's television into an always-on residential proxy node. The move comes less than a month after researchers found that more than 42 percent of games and other apps available...

Malicious code in final-poc-usa (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6cc39e355e69ec11b0532da1e2b2a418601a4c5594b100ba6f054f0e52be44be The OpenSSF Package Analysis project identified 'final-poc-usa' @ 0.99800.0 rubygems as malicious. It is considered malicious because: - The...

MAL-2026-6118 Malicious code in final-poc-usa (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6cc39e355e69ec11b0532da1e2b2a418601a4c5594b100ba6f054f0e52be44be The OpenSSF Package Analysis project identified 'final-poc-usa' @ 0.99800.0 rubygems as malicious. It is considered malicious because: - The...

PT-2026-43572

The HBook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'hb country iso', 'hb usa state iso', and 'hb canada province iso' parameters in all versions up to, and including, 2.1.6 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2025-63004

Missing Authorization vulnerability in Skynet Technologies USA LLC All in One Accessibility all-in-one-accessibility allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects All in One Accessibility: from n/a through = 1.15...

CVE-2025-63004

CVE-2025-63004 involves a Missing Authorization vulnerability in the WordPress plugin All in One Accessibility by Skynet Technologies USA LLC. Public data indicates affected version range is from n/a through 1.14, with a CVSS3.1 base score of 4.3 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N). The connect...

EUVD-2020-19888

Malware in sbrugna...

EUVD-2024-31553

Malicious code in bioql PyPI...

Zoom Workplace 安全漏洞

Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace that stems from a buffer overflow that could lead to a denial of service attack...

TalentNeuron Suite 安全漏洞

TalentNeuron Suite is a comprehensive platform for talent layout by TalentNeuron USA. A security vulnerability exists in TalentNeuron Suite version 0.4.3, which stems from a parameter injection and could lead to an SQL injection attack...