The fastest dork scanner written in Go. Contribute to dwisiswant0/go-dork development by creating an account on GitHub.

Chaining multiple bugs on TikTok for Android to achieving Remote code execution in the application’s context.

0x00 前言skay之前在审计solr的时候发现了一个任意文件读取的漏洞，不过报给官方后官方拒绝修复，认为

An attacker is frequently in the position of having to find a technique to evade some data integrity measure implemented by a target. One instructive example of a data integrity measure is a message authentication check. Generally, message authentication…

Fuzzing FastStone Image Viewer v.7.5; CVE-2021-26236 Arbitrary Code Execution exploit & root cause analysis.

Intro The Sysmon ProcessAccess event has been used in threat hunting and detection efforts in order to alert on techniques such as process injection and credential access. According to the…

Research Paper: https://hx01.me/Abusing_Data_Protection_Laws_For_D0xing_and_Account_Takeovers.pdf

Today SonarSource is pleased to share a guest contribution to our Code Security blog series about learnings from a chain of serious vulnerabilities in MyBB.

斗象智能安全，以IT资产为核心的全息安全监控与分析，为企业建立全新模式的安全服务体系

🔪Browser logic vulnerabilities :skull_and_crossbones: - Metnew/uxss-db

CVE-2020-27223 Vulnerability App & PoC. Contribute to motikan2010/CVE-2020-27223 development by creating an account on GitHub.

负载均衡的场景大家遇到的不是一两回了，很多人遇到能出外网的可以轻松搞定，遇到那种节点机器不出网的就人傻了，今天咱们拿捏一下。

This adds an exploit for CVE-2021-1732 which is a vulnerability in win32k. By calling NtUserConsoleControl in a callback function and passing the window that is currently being created, a field can...

A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures. - mytechnotalent/Reverse-Engineering

Contribute to h4x0r-dz/RCE-Exploit-in-BIG-IP development by creating an account on GitHub.

Wicked sick v2.0 script is intended to automate your reconnaissance process in an organized fashion. - storenth/lazyrecon