Contribute to cyberark/ChattyCaty development by creating an account on GitHub.

Originating from the Bishop Fox team, Sliver is an open-source, cross-platform, and extensible C2 framework. It's written primarily in Go, making it fast, portable, and easy to customize. This versatility makes it a popular choice among red teams for adversary…

Hacking new SushiSwap router contract. Including full proof of concept and demo environment.

c0c0n is a 15 years old platform that is aimed at providing opportunities to showcase, educate, understand and spread awareness on Information Security, data protection, and privacy. It also aims to provide a hand-shaking platform for various Corporate, Government…

The Aqua Nautilus research team found detected thousands of exposed registries and artifact repositories in some of the world’s largest organizations

As a rule, book reviews are not a thing I usually do. So when I received an out-of-the-blue email from Cory Doctorow last week asking if I would review his latest book, Red Team Blues, it took a mi…

Update on our progress on the 3D-printable BusKill prototype, a DIY USB kill cord to protect your laptop's data from thieves.

In depth analysis of new python malware. Highlights: 22 malicious packages detected, C2 comms capable via TOR, manueaverable and stealth...

This talk provides an overview of how Google uses AI to strengthen Gmail's document defenses and withstand attacks that evade traditional AVs

KeePassXC Password Manager

Apache Superset is an open source data visualization and exploration tool. It has over 50K stars on GitHub, and there are more than 3000 instances of it exposed to the […]

A command-line productivity tool powered by AI large language models like GPT-4, will help you accomplish your tasks faster and more efficiently. - TheR1D/shell_gpt

A tool to quickly do keyword searches over Gitlab and Github for OSINT & bug bounty recon - codingo/dorky

Discover the best practices and tools to scan and secure your infrastructure as code (IaC) throughout the DevOps software development lifecycle. From threat modeling to monitoring, this comprehensive guide offers valuable insights to improve the security…

Merlin, a decentralized exchange built on the newly launched zkSync Era blockchain, saw its liquidity pool compromised on Wednesday during a public sale of its MAGE tokens.

Did you know that RDP is unsafe without the use of additional protection like a VPN? In this blog post we will explain why and demonstrate the impact.

"Canva" of K8s Observability. Available on CLI, Self-Hosted, and Cloud - https://ddosify.com 🚀 - GitHub - ddosify/ddosify: "Canva" of K8s Observability. Availabl...

We have identified an issue with h2o server where malformed HTTP/1.1 requests crash the process, occasionally locking up child workers and causing a denial of service/outage dropping open connectio...