Buffer overflow vulnerabilities have driven remote code execution for decades and keep appearing in critical network ...

├── Blue_Tools │ ├── BlueTeam_ABC_123.jar │ ├── CobaltStrikeScan.exe │ ├── DuckMemoryScan.exe │ └── LiqunShield.7z ├── LICENSE ├── README.md ├── Red_Tools │ ├── LiqunKit 综合漏洞利用工具.7z │ ├── TPScan.jar │ ...

Security tooling is not written in a single language. Python powers most automation. C sits at the exploit layer. PowerShell ...

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell ...

Meta’s AI chief says new Muse Spark update will sharpen coding, agentic AI Alexandr Wang said the upcoming Muse Spark update will significantly improve coding and agentic capabilities, while analysts ...

This week’s security news is mostly about weak spots. Browsers, bots, sandboxes, AI systems, and email flows all show the same problem in different ways. Everything looks normal until someone tests a ...

The Vietnam-aligned threat actor known as OceanLotus has been attributed to two distinct campaigns that targeted domestic entities and stock investors with a backdoor known as SPECTRALVIPER. The ...

ESET researchers have discovered two as-yet undocumented Windows variants of SprySOCKS, a previously Linux-only backdoor reportedly used by FishMonger, the group believed to be operated by a Chinese ...

Terms often used in cybersecurity discussions and education, briefly defined. Your corrections, suggestions, and recommendations for additional entries are welcome: email the editor at editor@n2k.com.

Our tracking of OceanLotus activities from 2024–2026 reveals a shift in operational focus. During this period, the Vietnam-aligned OceanLotus adopted a more selective approach to external operations ...