
Cobalt-Strike-CheatSheet
Some notes and examples for cobalt strike's functionality

Some notes and examples for cobalt strike's functionality

Open .eml test set for evaluating how email security controls and AI mailbox assistants handle indirect prompt injection across disclosure,…

Weak-RNG stream-sweep research (CVE-2026-71851 class): PRNG schemes x seeds -> BIP39 -> victim set membership

Win32 and Kernel abusing techniques for pentesters

A curated set of NSO Group internal documents, product materials and sworn testimony that entered the public record in WhatsApp Inc. and Meta…

A cheatsheet for exploiting server-side SVG processors.

OWASP Ontology-driven Threat Modelling framework

OWASP Thick Client Application Security Verification Standard

In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOG_TRACE", a possible crash of application could occur due to a read of an…

CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065

Comprehensive set of over 1500 AppArmor profiles to confine Linux system processes, desktops, and services, with support for multiple distributions…

Stereotyped Challenges (2014~2023)