Elastic Security detection content for Endpoint. Contribute to elastic/protections-artifacts development by creating an account on GitHub.

A static code analysis for WordPress (and PHP). Contribute to webarx-security/wpbullet development by creating an account on GitHub.

Framework for Automating Fuzzable Target Discovery with Static Analysis. - ex0dus-0x/fuzzable

How Wiz Research uncovered multiple related vulnerabilities in PostgreSQL-as-a-Service offerings from GCP, Azure, and others.

This is a pre-authenticated RCE exploit for VMware vRealize Operations Manager - sourceincite/DashOverride

Zimbra's sudo configuration permits the zimbra user to execute the zmslapd binary as root with arbitrary parameters. As part of its intended functionality, zms…

Cisco Compromise - Insights from Cisco and the trails the attackers can leave in your logs.

Contribute to infobyte/cve-2022-27255 development by creating an account on GitHub.

A Python script to exploit CVE-2022-36446 Software Package Updates RCE (Authenticated) on Webmin < 1.997. - p0dalirius/CVE-2022-36446-Webmin-Software-Package-Updates-RCE

Detection Engineering is the process of optimizing security controls to get the most value out of them. Therefore, it is essential to prioritize your efforts according to your organization's needs and requirements. Here we cover the methodology of Detection…

During my malware sandbox evasion research, I stumbled upon the Unprotect Project website. It is a community-contributed repository of evasion techniques used by malware. I saw that the the Checking Memory Size technique doesn't have a example snippet yet…

Source Code Management Attack Toolkit. Contribute to h4wkst3r/SCMKit development by creating an account on GitHub.