OshoosiClaw v1.2.0 is an open source decentralized, autonomous Endpoint Detection and Response (EDR) and AI agent containment engine written in Rust for Linux and Windows. It operates locally with kernel and hardware boundary enforcement, aiming to defend against advanced attack techniques such as kernel callback blinding and AI agent breakouts. The project is actively seeking developers and penetration testers to evaluate its security by attempting various attack methods and to contribute improvements. No known exploits or vulnerabilities have been reported at this time.
This content is a personal learning roadmap shared by an individual aspiring to become a malware analyst. It includes references to resources for learning C programming, assembly language, and Windows internals, but does not describe any specific malware or security threat.
A new JavaScript obfuscation technique has been demonstrated where formatting changes to a script can transform it into a completely different program. This technique leverages 186 different methods to alter script behavior through formatting, which can be tested via provided online tools and demos. The technique is primarily a research and development insight into JavaScript code manipulation rather than a direct vulnerability or exploit in existing software.
VigilOSS is an AI-powered harness designed to assist in structured, long-running offensive security engagements such as code audits, web penetration tests, and bug bounty hunting. It coordinates specialist agents and tools to maintain investigation continuity, improve quality, and reduce false negatives. The tool emphasizes human oversight and verification, ensuring findings are reliable and reproducible. VigilOSS is intended for authorized use only and is provided under an Apache 2.0 license without warranty.
Sudocrypt v16.0 is an international Capture The Flag (CTF) and cryptic challenge event organized by Exun Clan, a student-run tech club. The event is scheduled for October 27–28, 2026, and is open globally. It features cryptography, code-breaking, and cybersecurity challenges with a prize pool of approximately $900 USD and additional rewards. The competition is online and team-based, encouraging participants to solve puzzles and demonstrate cybersecurity skills.
The provided information references 'pwn.college' as a resource for learning exploit development and hacking techniques. It is presented as a recommendation for beginners and those exploring cybersecurity, without any indication of a specific vulnerability, exploit, or active threat. No technical details, affected software versions, or exploit data are provided.
This content describes a free, comprehensive, and open-source exploit development curriculum covering C programming, x86-64 assembly, reverse engineering, and advanced exploitation techniques. It is intended as an educational resource for beginners and security researchers to learn exploit development from the ground up. The curriculum is not a vulnerability or exploit itself but a learning tool.
This report discusses the disclosure of a hardcoded signing key flag in an Android context, as presented in a Hacker101 CTF challenge write-up. The information is sourced from a Medium blog post shared on Reddit's ExploitDev community. No specific affected software versions or vendor advisories are provided. There is no indication of active exploitation in the wild or available patches.
A user on Reddit announced the creation of a Scripts Hub website for Roblox exploits, allowing users to post and share exploit scripts with moderator review. The announcement is a request for advice and reviews rather than a report of a specific vulnerability or active threat.
A local privilege escalation vulnerability exists in the Gigabyte BIOS utility kernel driver GVCIDrv64.sys. The driver exposes device interfaces with no access control, allowing any local user to perform arbitrary physical memory read/write and I/O port access. This enables an attacker to escalate privileges by manipulating process tokens and spawning a system shell. Gigabyte has removed the vulnerable driver and replaced it with a new driver in a later utility version.
A security researcher spent approximately 80 days reverse engineering ARM32 firmware of a white-label OEM IoT DVR platform deployed on over 28,000 internet-facing devices. The research uncovered an unauthenticated remote code execution (RCE) vulnerability via a protocol authentication bypass using static AES-256-CBC keys, an unsigned root firmware upgrade execution chain, and a command injection vulnerability due to insufficient input sanitization. Despite these findings, the exploit did not yield practical impact due to patched bench hardware, dormant update opcodes, and lack of vendor security programs. The vulnerability remains unpatched and unexploited in the wild.
SunsetScan is an open-source local network security auditing tool designed to identify unsupported and end-of-life hardware on home and small business networks. It fingerprints devices, checks software against vulnerability and lifecycle databases from 224 vendors, and produces detailed reports with remediation steps. The tool is read-only and non-destructive, relying on local scanning without external API calls. It aims to help users determine if devices on their networks still receive security updates, thereby reducing risks from unsupported hardware. SunsetScan is primarily supported on Linux and WSL2, with partial support on macOS and no native Windows support. The project includes a large hardware lifecycle database and emphasizes accuracy in lifecycle status classification.
This report details a controlled memory forensics investigation on a Windows 11 system to determine what user activity can be reconstructed from a RAM capture. The experiment involved normal user actions such as browsing with Edge, running PowerShell commands, and typing unsaved text in Notepad. Memory was acquired using WinPmem and analyzed with Volatility 3, revealing recoverable artifacts including running processes, command-line arguments, network state, and unsaved text. The findings emphasize that memory forensics is most effective when multiple artifacts are correlated rather than analyzed in isolation. This is a research and educational exercise rather than a vulnerability or exploit.
An unauthenticated local privilege escalation vulnerability exists in the MODAPI.sys kernel driver installed by MSI Dragon Center 2.0.155.0. The driver exposes a device object with a security descriptor allowing any local user to open it without administrative privileges or UAC. This enables arbitrary read and write access to Model-Specific Registers (MSRs), including the IA32_LSTAR MSR, which controls the CPU syscall entry point. By overwriting IA32_LSTAR, an attacker can execute arbitrary code at kernel privilege level (CPL0), bypassing SMEP via gadgets found in the kernel image. The exploit was tested successfully on Windows 10 x64 22H2 (build 19045.6456) from a standard user account. The vulnerability was reported to MSI on 2026-06-21 and a fix has been verified.
atomicvulns is an open-source educational project providing a collection of small, intentionally vulnerable web applications, each demonstrating a single OWASP Top 10 2021 vulnerability. It includes 38 isolated apps ('atoms'), each with a vulnerable and fixed version, plus walkthroughs for exploitation and remediation. The project is designed for pentest and AppSec learners to study and practice exploiting and fixing common web vulnerabilities in a focused, hands-on manner. It is not a vulnerability or exploit itself but a learning tool.
A vulnerability in Fortinet's fortimon3_74.sys kernel driver allows any local administrator to terminate protected processes, including Windows Defender and lsass.exe, by sending an 8-byte message to an unauthenticated communication port. This bypasses Protected Process Light (PPL) protections without requiring complex exploitation techniques. Additionally, a handle leak issue may enable credential theft by duplicating a handle to a protected process. The vulnerability requires local administrator privileges and affects the FortiClient anti-exploit minifilter driver.
This entry describes an Ask Me Anything (AMA) event featuring Yuhang Wu, a former red team engineer and exploit developer with experience at Tesla and TikTok. The AMA focuses on topics such as enterprise infrastructure hacking, Linux kernel exploitation, and AI security innovations. No specific vulnerability or exploit details are provided in the content. There is no indication of an active security threat or vulnerability disclosed in this event announcement.
This is a tutorial-style demonstration of exploiting a binary vulnerability caused by incorrect handling of the order of operations in code. It is presented as an educational resource for exploit development, focusing on a specific type of bug in a pwnable challenge binary. No specific software product or version is identified as affected. The content is primarily instructional and does not describe an active, widespread threat or vulnerability with known exploits in the wild.
A legal case involving a traveler who allegedly used a 'duress password' on a GrapheneOS phone to wipe data during a Customs and Border Protection (CBP) search at a US airport. The incident raises complex legal questions about the use of duress passwords, warrantless device searches at ports of entry, and constitutional protections. The traveler was charged with a felony for wiping his phone, which CBP alleges destroyed evidence. The case highlights ongoing debates about privacy rights, government surveillance of activists, and the legality of device searches without warrants at US borders.
NEO-Radar v1.11 is an open-source network scanning tool designed to simplify host discovery and port scanning for users with limited networking knowledge. It automates basic scanning tasks commonly performed by tools like Nmap. The program supports Linux, Termux (Android), and has a Windows PowerShell version. There is no indication of inherent security vulnerabilities or exploits associated with this software in the provided information.