g3n3r4l7
-
HEX.DANCE (hex.dance)
Cybersecurity visualization and analysis platform. More
-
Node.js Privilege Escalation (hackerone.com)
Permissions can be bypassed via arbitrary code execution through abusing libuv signal pipes.
-
New VPN Backdoor (schneier.com)
Analysis of a newly discovered VPN backdoor affecting multiple networks.
-
Smartphone Security for Protesters (privacyguides.org)
A guide for activists on securing their smartphones against surveillance.
-
Docker 1-Click RCE Chain (m0z.ie)
Developing an exploit chain for remote code execution in Docker environments.
-
BLAST AI-powered SAST Scanner (corgea.com)
Whitepaper on BLAST, a new AI-powered static analysis security testing scanner.
-
Enhancing OWASP Noir with AI (hahwul.com)
Leveraging large language models (LLMs) to improve OWASP Noir.
X4
-
DeepSeek Data Leak (@galnagli)
DeepSeek's internal ClickHouse database was publicly exposed, leaking sensitive information.
-
DeepSeek Database Breach (@wiz_io)
Wiz Research reports a massive security issue exposing secret keys and private logs.
-
Malicious Web Injects (@malware_traffic)
Analysis of new web inject malware campaigns, including KongTuke and SocGholish.
-
2FA QR Code Security Flaw (@zack0x01)
A vulnerability exposing customer emails in plaintext due to a flawed QR code implementation.
g1thub5
-
iOS Shortcuts Exploits (github.com)
A collection of exploits and unknown tricks within the iOS Shortcuts app. Explore on GitHub
-
gitC2 - Simple GitHub C2 (github.com)
Proof-of-concept of a GitHub-based command-and-control system written in Rust. Explore on GitHub
-
Physical Bitcoin Attacks (github.com)
A comprehensive repository on physical security threats to Bitcoin holders. Explore on GitHub
-
OSV Scanner Action (github.com)
A GitHub action to scan dependencies for known vulnerabilities using OSV. Explore on GitHub
-
Tweet Machine (github.com)
A tool to retrieve deleted tweets, old bios, and timestamped posts even if an account is suspended. Explore on GitHub