css-the-bomb-inside-your-inbox
portswigger/css-the-bomb-inside-your-inboxAll the materials for Gareth Heyes' Black Hat talk: CSS: the bomb inside your inbox.
ai-securitycurated-resourcesdata-exfiltration+7
34
portswigger/css-the-bomb-inside-your-inboxAll the materials for Gareth Heyes' Black Hat talk: CSS: the bomb inside your inbox.
onhexgroup/conferencesConference presentation slides
owasp/owasp-model-card-security-standardOpen standard for documenting security-relevant metadata of AI models, including training data provenance, PII risk, known vulnerabilities, and…
o7-machinehum/phantomdriveSeemingly normal USB drive with a hidden security feature
cyber-note/cve-2026-34835-black-box-analysisA black-box (DAST) security analysis of CVE-2026-34835 focusing on external validation methodology, observable behavior, security impact, and…
jianrongxiao-linksys/dnsmasq-cve-2026Automated defect verification tool for 6 dnsmasq CVEs (CVE-2026-2291, 4890, 4891, 4892, 4893, 5172)
d78ui98/apkdeeplensAndroid security insights in full spectrum.
saqib-butt2/blackbox-pentesting-infsecosFull black-box penetration test against SecOS:1 (VulnHub) — CSRF exploitation, privilege escalation via CVE-2015-1328 (OverlayFS), post-exploitation
heventafese/penetration-testing-walkthrough-hacksudo-thorBlack-box penetration test against HackSudo Thor : CVE-2014-6271 Shellshock RCE through Apache mod_cgi, chained with sudo misconfiguration and bash…
trerb/markdown-exfil-testerBlack-box test whether an LLM chatbot is vulnerable to markdown/HTML exfil (CVE-2025-32711 class). Spins up a sink, sends payloads, renders in…
robertmotr/zirconiumDLL-injectable internal game cheat for Plutonium BO2 zombies
real-tim-johnston/megaquagga-pentest-reportBlack box penetration test — WordPress exploitation, privilege escalation via CVE-2022-0847
xbxarchivr/unisocunlockerFree and Open-Source FRP Remover based on CVE-2022-38694
fbm31/audit-blackbox-web-to-rootAudit de sécurité Black Box d'un serveur Drupal 7. Démonstration d'une Kill Chain complète : Injection SQL (CVE-2014-3704) ➔ RCE ➔ Reverse Shell ➔…
wiz-sec-public/githuntDemos for Black Hat Europe 2025's The Forensic Trail On GitHub: Hunting For Supply Chain Activity
0x90n/infosec-black-fridayAll the deals for InfoSec related software/tools this Black Friday
ffri/poc-publicCurated collection of proof-of-concept vulnerability exploits and research presented at security conferences such as Black Hat and CODE BLUE.