g3n3r4l30
-
Torflow Network Analysis Tool (torflow.uncharted.software)
Torflow provides network analysis and visualization for Tor relays, offering insights into network performance and security monitoring. uncharted.software
-
Interim Computer Museum Digital Archive (icm.museum)
The Interim Computer Museum showcases historical computing devices and preservation efforts, serving as a digital archive for technology enthusiasts. icm.museum
-
Phrack Magazine Latest Issue (phrack.org)
latest issue of Phrack Magazine, a long-standing publication for security research and hacking culture. Phrack Magazine
-
Multi-Agent Hijacks, Ruby Deserialization, Image Scaling Attacks (blog.trailofbits.com)
Hijacking multi-agent systems, Ruby deserialization exploits, and weaponizing image scaling against production AI systems.
-
Marshal Madness: Ruby Deserialization History (blog.trailofbits.com)
Brief history of Ruby deserialization exploits.
-
Weaponizing Image Scaling (blog.trailofbits.com)
New Trail of Bits research on production AI image scaling attacks.
-
0-Click Account Takeover and Security Demo (hesar101.github.io)
Exploitation via CaMeL.
-
Azure Weakest Link: Cross-Tenant and API Secrets (binarysecurity.no)
Misconfigurations leading to cross-tenant compromise.
-
Azure API Connections Secrets Leak (binarysecurity.no)
API connections spilling secrets.
-
ECC.Fail Cryptography Insights (ecc.fail)
ECC vulnerabilities & failures.
-
MCP Security: Network-Exposed Servers Backdoors (trendmicro.com)
Cloud misconfiguration risks.
-
Gumroad Security Report (hacktron.ai)
Findings & recommendations.
-
Automate Cloud Security with AWS Step Functions (senayakut.com)
Security workflows automation.
-
Intel Outside: Hacking Every Employee (eaton-works.com)
Hacking Intel staff & internal sites.
-
OSINT of Cuba Analysis (unishka.substack.com)
Intelligence insights.
-
Malicious PyPI and npm Packages (thehackernews.com)
Supply chain attacks.
-
Cache Deception + CSPT Account Takeover (zere.es)
Turning low-severity bugs into account takeover.
-
Trivial C Random Exploitation (blog.doyensec.com)
RNG exploitation.
-
Zero-Day Startup Offers $20M for Smartphone Hacks (techcrunch.com)
New vulnerability market.
-
Exploiting CodeRabbit: PR to RCE on 1M Repos (research.kudelskisecurity.com)
Pull request → RCE.
-
Supply chain risks.
-
How Brands Downplay Security Breaches (inti.io)
Case study: Orange.
-
Missing Semester of AI: LLM Security (huggingface.co)
AI vulns & best practices.
-
Request Collapsing Demystified (fastly.com)
CDN security implications.
-
DOM-Based Extension Clickjacking Risks (marektoth.com)
Browser extension exploit.
-
AWS IAM Privilege Escalation Techniques (hackingthe.cloud)
Exploiting IAM misconfigs.
-
A Fuzzy Escape: Hypervisor Vulnerability Research (bughunters.google.com)
Hypervisor exploit.
-
AI Assisted Dev aka Vibecoding (blog.zsec.uk)
AI in dev workflows.
-
Windsurf: Memory-Persistent Data Exfiltration (embracethered.com)
SpAIware exploit.
-
DEF CON 33 VPN Cloud Breach (vimeo.com)
Cloud VPN bug exploitation. Watch Here
X1
-
GPT-5 cyber capabilities revealed. Watch Here
y0utube3
-
Client-side path traversal, CSRF, deserialization, AI-based fraud detection. Watch Here
-
Deserialization: what, how and why \[not\] - Alexei Kojenov - AppSecUSA 2018 (YouTube) (youtube.com)
Additional session. Watch Here
-
AI & Security Demo (YouTube) (youtube.com)
Watch Here
g1thub8
-
OAuth Phishing, TOCTOU Attacks, AI Security Tools (github.com)
Azure OAuth phishing, OpenAI TOCTOU, iOS privacy vulns, prompt injection. Explore
-
Google Security Advisory GHSA-mp56-7vrw-qxvf (github.com)
TOCTOU attack. Explore
-
Anthropic Claude Code Security Review (github.com)
AI code analysis tool. Explore
-
NineSunsInc Mighty Security (github.com)
Security tooling repo. Explore
-
iOS 18.5 Bluetooth Privacy Vuln (github.com)
Exploit PoC. Explore
-
Git Authors 0.2.0 (github.com)
Git commit authorship tracking. Explore
-
Trail of Bits Anamorpher (github.com)
Security visualization tool. Explore
-
MCP Guardian (github.com)
Cloud MCP security guardian tool. Explore