519 matches found
CVE-2022-1068
CVE-2022-1068 Analysis and Reproduction of Modbus Slave Buffer Overflow Vulnerability CVE-2022-1068 Reference: https://mp.weixin.qq.com/s/5InTTej26aDFzQgB8l6MHw Disclaimer: This article is only for the purpose of technical exchange, learning, and research. It is strictly prohibited to use the...
firmware-analysis-toolkit
FAT — Firmware Analysis Toolkit Descargar la última versión · Registro de cambios · Instalación Firmware Analysis Toolkit es un conjunto de herramientas de investigación de seguridad para investigar la seguridad del firmware de IoT, IA física, dispositivos móviles y robótica. Está diseñado...
droid-hunter
.---. .----------- / \ / ------ / / \ / ----- ╔╦╗╦═╗╔═╗╦╔╦╗ ╦ ╦╦ ╦╔╗╔╔╦╗╔═╗╦═╗ ////// ' / --- ║║╠╦╝║ ║║ ║║───╠═╣║ ║║║║ ║ ║╣ ╠╦╝ //// / // : : --- ═╩╝╩╚═╚═╝╩═╩╝ ╩ ╩╚═╝╝╚╝ ╩ ╚═╝╩╚═ // / / / '-- Por HaHwul // //..\ www.hahwul.com ====UU====UU==== https://github.com/hahwul/droid-hunter '//||\ ''...
Learning from Failures: A Failure-Driven Prompt Refinement for LLM-Based Vulnerability Analysis
Large Language Models have emerged as promising tools for software vulnerability analysis, but their effectiveness depends heavily on prompt design. Existing research primarily compares prompting strategies using aggregate performance metrics, providing limited insight into why models fail or how...
android-kernel-exploitation
Exploitazione del Kernel Android Obiettivo L'obiettivo di questo workshop è iniziare con l'analisi delle vulnerabilità del kernel e lo sfruttamento nella piattaforma Android. Utilizzo Clona il repository git clone https://github.com/cloudfuzz/android-kernel-exploitation /workshop URL delle Github...
exploit-framework
Exploit Framework Browser-based Exploit Research Framew...
awesome-list — Updated!
Awesome Cybersecurity List My personal collection of awesome blog posts, write-ups, and papers focusing on cybersecurity. For a deeper dive into cybersecurity-related tools, check out the dedicated Cybersecurity Tools list. Outline 2026 2025 2024 2023 2022 2021 2020 2019 2018 2017 2016 2014 2011...
Lessons from the Hardware Hacking Competitions: Verification Techniques, Findings, and Insights
Hardware hacking competitions have emerged as practical platforms for evaluating security weaknesses in complex System-on-Chip SoC designs while promoting security-aware verification and tool development. This paper presents a systematic study of SoC security verification through open-box hardwar...
cybersecurity-projects
Hands-on cybersecurit...
qwen3.8-27b-cyber-exploit-agent
--- libraryname: peft basemodel: AEON-7/Qwen3.8-27B-AEON-ULTIM...
Vexa
⚡ Vexa — Autonomous Self-Healing Security Platform Continuo...
Root-the-Box
EH-Stage6: Exploit Chain as Code This repository contains my...
Metasploitable2-Exploit
Metasploitable2 Exploitation Lab A complete penetration testi...
diaphora-mcp v1.0.6
Читать на русском языке Diaphora MCP Diaphora MCP is an MCP Model Context Protocol server for automated binary diffing. It connects Diaphora the diffing engine and IDA Pro the disassembler via the MCP protocol, allowing AI agents such as Claude Code to perform binary file comparison, find securit...
diaphora-mcp v1.0.5
Читать на русском языке Diaphora MCP Diaphora MCP is an MCP Model Context Protocol server for automated binary diffing. It connects Diaphora the diffing engine and IDA Pro the disassembler via the MCP protocol, allowing AI agents such as Claude Code to perform binary file comparison, find securit...
Beyond Refusal: A Same-Lineage Study of Aligned and Abliterated LLMs for Vulnerability Analysis
Large language model LLM-assisted software security operates at a difficult boundary: the vulnerability-analysis terminology needed for legitimate code review, triage, and repair can closely resemble terminology associated with misuse. Existing safety and cybersecurity evaluations are difficult t...
RustMizan: A Compilable, Contamination-Aware Benchmarking Framework for Rust Vulnerabilities
LLM agents are increasingly applied to vulnerability analysis, but existing benchmarks have not kept pace. They typically rely on small non-compilable snippets, focus on binary classification vulnerable or not, and do not account for the risk that publicly-released datasets are part of model...
Your Space Is My Zone: Demystifying the Security Risks of AI-Powered Applications on Pre-Trained Model Hubs
AI-powered Applications AI-Apps, hosted on platforms such as Hugging Face, are democratizing access to pre-trained models through online inference and fine-tuning services. While lowering AI adoption barriers, these platforms introduce an unexplored attack surface, as AI-Apps are often developed ...
Reinforcement Learning for Software Vulnerability Analysis: A Systematic Review with Emphasis on C/C++ Source Code and Static Analysis
Vulnerability detection in C/C++ software remains a major security challenge due to code complexity, manual memory management, and the limitations of traditional static analysis. Reinforcement Learning RL has emerged as a promising approach, particularly for fuzzing, test generation, program...