How I found my first critical vulnerability which came from forgetting my own password on the…
https://medium.com/@sufyan0x01/how-i-found-my-first-critical-vulnerability-which-came-from-forgetting-my-own-password-on-the-a062bd448868?source=rss------bug_bounty-5

I had already written the program off. Three days later I came back, could not remember my password, and the reset flow showed me…Continue reading on Medium » (https://medium.com/@sufyan0x01/how-i-found-my-first-critical-vulnerability-which-came-from-forgetting-my-own-password-on-the-a062bd448868?source=rss------bug_bounty-5)

CSRF | How to Test — Part 1

Hi how are u ? i am sure u missed me right 😔?Continue reading on Medium »
Read more...

llm-agent-testbed
https://kitploit.com/en/tools/github/pie-script/llm-agent-testbed

An empirical security testbed evaluating prompt injection, confused-deputy vulnerabilities, and tool-calling defenses in LLM agents.

AIDebug
https://kitploit.com/en/tools/github/anpa1200/aidebug

Evidence-focused malware reverse engineering with deep PE/.NET inspection, Ghidra reconstruction, AI cross-checks, YARA, and ELF debugging

DNSRPC-BOF
https://kitploit.com/en/tools/github/paradoxis/dnsrpc-bof

Beacon Object File (BOF) implementation of the dnscmd.exe functionality used to obtain remote code execution on an ADIDNS server by exploiting the ServerLevelPluginDll edge by using MS-DNSP.

CSRF | How to Test — Part 1
https://elusive1973.medium.com/csrf-how-to-test-part-1-7aec79191a5c?source=rss------bug_bounty-5

Hi how are u ?
i am sure u missed me right 😔?Continue reading on Medium » (https://elusive1973.medium.com/csrf-how-to-test-part-1-7aec79191a5c?source=rss------bug_bounty-5)

A $0 Bounty Isn’t a Verdict on Your Bug. It’s a Verdict on Your Program Choice.

3,585 unpaid disclosed reports, autopsied: nearly half sit on programs that have never paid anyone — including Resolved Criticals with a…Continue reading on Medium »
Read more...

grype v0.118.0

A vulnerability scanner for container images and filesystems
Read more...

qlcoder
https://kitploit.com/en/tools/github/neuralprogram/qlcoder

Agentic Framework for Synthesizing CodeQL Queries

Learning-to-Detect
https://kitploit.com/en/tools/github/shuangliangx/learning-to-detect

Detects unknown jailbreak attacks in large vision-language models using hidden state analysis and autoencoders, with training and evaluation pipelines for robust safety monitoring.

upx v5.2.1

UPX - the Ultimate Packer for eXecutables
Read more...

flatpak v1.18.2

Linux application sandboxing and distribution framework
Read more...

A $0 Bounty Isn’t a Verdict on Your Bug. It’s a Verdict on Your Program Choice.
https://medium.com/@rajnamdev/a-0-bounty-isnt-a-verdict-on-your-bug-it-s-a-verdict-on-your-program-choice-fa03468e3a58?source=rss------bug_bounty-5

3,585 unpaid disclosed reports, autopsied: nearly half sit on programs that have never paid anyone — including Resolved Criticals with a…Continue reading on Medium » (https://medium.com/@rajnamdev/a-0-bounty-isnt-a-verdict-on-your-bug-it-s-a-verdict-on-your-program-choice-fa03468e3a58?source=rss------bug_bounty-5)

upx v5.2.1
https://kitploit.com/en/posts/github-upx-upx-v521

UPX - the Ultimate Packer for eXecutables

flatpak v1.18.2
https://kitploit.com/en/posts/github-flatpak-flatpak-1182

Linux application sandboxing and distribution framework

maltrail v3.2
https://kitploit.com/en/posts/github-stamparm-maltrail-32

Real-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS, HTTP, and IP traffic.

maltrail v3.2

Real-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS, HTTP, and IP traffic.
Read more...