
inside-pegasus
A curated set of NSO Group internal documents, product materials and sworn testimony that entered the public record in WhatsApp Inc. and Meta…

A curated set of NSO Group internal documents, product materials and sworn testimony that entered the public record in WhatsApp Inc. and Meta…

Comprehensive set of over 1500 AppArmor profiles to confine Linux system processes, desktops, and services, with support for multiple distributions…

Weak-RNG stream-sweep research (CVE-2026-71851 class): PRNG schemes x seeds -> BIP39 -> victim set membership

In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOG_TRACE", a possible crash of application could occur due to a read of an…

Open .eml test set for evaluating how email security controls and AI mailbox assistants handle indirect prompt injection across disclosure,…

Win32 and Kernel abusing techniques for pentesters

A cheatsheet for exploiting server-side SVG processors.

OWASP Ontology-driven Threat Modelling framework

OWASP Thick Client Application Security Verification Standard

CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065

Stereotyped Challenges (2014~2023)