Hello Readers, This post will be focused on setting up a vulnerable thick client application and finding vulnerabilities. The b...

CVE-2021-35042: Potential SQL injection via unsanitized QuerySet.order_by() input. Unsanitized user input passed to QuerySet.order_by() could bypass intended column reference validation in path marked for deprecation resulting in a potential SQL injection…

Discover the location of nearby Telegram users 📡🌍. Contribute to tejado/telegram-nearby-map development by creating an account on GitHub.

ChopChop is a CLI to help developers scanning endpoints and identifying exposition of sensitive services/files/folders. - michelin/ChopChop

This cheat sheet outlines common enumeration and attack methods for Windows Active Directory using PowerShell. - drak3hft7/Cheat-Sheet---Active-Directory

If you rename procdump.exe to dump64.exe and place it in the "C:\Program Files (x86)\Microsoft Visual Studio\*" folder, you can bypass Defender and dump LSASS.

Writeup For Damctf2021 apocryphon Challenge Osint-Github

Threat actors are constantly using new tricks and tactics to collect various confidential credentials from users’ mobile devices via phishing […]

SQL Injection Exploitation Tool. Contribute to CiscoCXSecurity/bbqsql development by creating an account on GitHub.

A Series of Baseband & LMP Exploits against Bluetooth Classic Controllers - Matheus-Garbelini/braktooth_esp32_bluetooth_classic_attacks

A collection of links related to Linux kernel security and exploitation - xairy/linux-kernel-exploitation