Archive

58 posts published so far

May 7, 2025
Fortifying AWS EKS: A Comprehensive Guide to Securing Containerized Workloads with AWS and Open-Source Tools
Tùng Nguyễn Thanh
Mar 27, 2025
Nuclei Multi-Step Template Gen: AI-Powered Automation for Chain-Based Functions in Penetration Testing
Tung Duong Dinh
Feb 23, 2025
[CVE-2024-21182] Oracle WebLogic Server
NgocKhanh

Feb 23, 2025

Reducing Alert Fatigue: Automating the Triage of Microsoft Defender’s Internal Port Scanning Alerts

Lucas

Feb 12, 2025

SigmaGen: AI-Powered ATT&CK-Mapped Threat Detection with Sigma Rules

Lucas

Feb 6, 2025

Trust No AI: Prompt Injection Along the CIA Security Triad - Part 3

Tung Do Viet

Feb 6, 2025

Trust No AI: Prompt Injection Along the CIA Security Triad - Part 2

Tung Do Viet

Feb 6, 2025

Trust No AI: Prompt Injection Along the CIA Security Triad - Part 1

Tung Do Viet

Jan 31, 2025

Gradient-based Adversarial Attacks against Text Transformers

Tung Do Viet

Jan 31, 2025

HopSkipJumpAttack: Tấn công decision-based mô hình học máy

Đức Linh Trần

Nov 17, 2024

[CVE-2023-31099] Việc hôm nay chớ để 1DAY

NgocKhanh

Oct 12, 2024

Zip Symlink attack

NgocKhanh

Sep 16, 2024

[CVE-2022-26133] Phân tích lỗ hổng Java Deserialization trong Bitbucket

Nguyễn Lê Thanh Tùng

Aug 28, 2024

How I bypassed Akamai WAF and exploited SQL Injection

Nhat “Fo” Anh

Aug 10, 2024

Analyze a Mobile Malware

Nguyễn Lê Thanh Tùng

Aug 8, 2024

Hackvertor Guideline

Z42-Hoàng Quang Huy

May 16, 2024

Integrating Security into the AWS DevOps Pipeline

Dat Pham Tat

May 13, 2024

Automated Detection and Remediation of Public Resources in AWS

Dat Pham Tat

May 7, 2024

Reflected XSS to Remote Code Execution in OpenMRS 3

hiu dang

Dec 19, 2023

[CVE-2023-46854] Stored XSS to Remote Code Execution in Proxmox Virtual Environment (1-click RCE)

hiu dang

Dec 13, 2023

[CVE-2022-26xx9] Lack of Randomness

Z42-Hoàng Quang Huy

May 5, 2023

[WebSocket] Scan SQL Injection thông qua SqlMap

user01

Apr 14, 2023

OutSystems Security (Part 1)

user01

Apr 14, 2023

ARM Exploit Development Part 1: Stack Overflow

Vũ Tiến Hòa

Mar 19, 2023

Về lỗ hổng trong thiết kế của SiteCore

H02

Command Palette

Fortifying AWS EKS: A Comprehensive Guide to Securing Containerized Workloads with AWS and Open-Source Tools

Nuclei Multi-Step Template Gen: AI-Powered Automation for Chain-Based Functions in Penetration Testing

[CVE-2024-21182] Oracle WebLogic Server

Reducing Alert Fatigue: Automating the Triage of Microsoft Defender’s Internal Port Scanning Alerts

SigmaGen: AI-Powered ATT&CK-Mapped Threat Detection with Sigma Rules

Trust No AI: Prompt Injection Along the CIA Security Triad - Part 3

Trust No AI: Prompt Injection Along the CIA Security Triad - Part 2

Trust No AI: Prompt Injection Along the CIA Security Triad - Part 1

Gradient-based Adversarial Attacks against Text Transformers

HopSkipJumpAttack: Tấn công decision-based mô hình học máy

[CVE-2023-31099] Việc hôm nay chớ để 1DAY

Zip Symlink attack

[CVE-2022-26133] Phân tích lỗ hổng Java Deserialization trong Bitbucket

How I bypassed Akamai WAF and exploited SQL Injection

Analyze a Mobile Malware

Hackvertor Guideline

Integrating Security into the AWS DevOps Pipeline

Automated Detection and Remediation of Public Resources in AWS

Reflected XSS to Remote Code Execution in OpenMRS 3

[CVE-2023-46854] Stored XSS to Remote Code Execution in Proxmox Virtual Environment (1-click RCE)

[CVE-2022-26xx9] Lack of Randomness

[WebSocket] Scan SQL Injection thông qua SqlMap

OutSystems Security (Part 1)

ARM Exploit Development Part 1: Stack Overflow

Về lỗ hổng trong thiết kế của SiteCore