Here's a cool trick for y'all looking to create new Nuclei templates for exploitable CVEs!
Using CVEmap you can get a list of CVEs with public proofs of concept, that have been marked as exploitable by CISA, are remotely exploitable AND don't have a Nuclei template (yet)!
Flags:
-k / -kev: Marked as exploitable vulnerabilities by CISA
-t=false / -template=false: Has no public Nuclei templates
-poc: Has public published POC
-re / -remote: is remotely exploitable
Good luck! 🤞
#nuclei #hacking #pentesting #bugbounty #CVEmap
Introducing Claude Code Security, now in limited research preview.
It scans codebases for vulnerabilities and suggests targeted software patches for human review, allowing teams to find and fix issues that traditional tools often miss.
Learn more: https://t.co/n4SZ9EIklG
Introducing Claude Code Security, now in limited research preview.
It scans codebases for vulnerabilities and suggests targeted software patches for human review, allowing teams to find and fix issues that traditional tools often miss.
Learn more: https://t.co/n4SZ9EIklG
We are please to announce our final release of 2024, Kali Linux 2024.4!
https://t.co/YGwhA8RhcX
Containing new default python, updates to gnome 47, our launch of the new forums, raspberry pi imager improvements, nethunter updates and more! Check it out!
The #FBI and @CISAgov have released guidance to help companies reduce the prevalence of cross-site scripting vulnerabilities and to urge software developers to take a “secure by design” approach. Learn more here: https://t.co/X7hax6d6ft
We are excited to announce the release of Kali Linux 2024.3, available for download and update now!
This release has been focused on multiple transitions, such as GCC 14, glibc 2.40, and Python 3.12. Please check out the blog post for full details.
https://t.co/xsWtE2zBcI
I'll be speaking at #DEFCON about FBI's secretly backdoored encrypted chat app that it used to wiretap the world. I'll show never-before-published images of the FBI's dashboard for reading the millions of intercepted messages; network infrastructure, more https://t.co/IEeFXtXqlI
Microsoft has released a recovery tool to help IT admins repair Windows machines hit by CrowdStrike's botched update. The USB tool does all the work, speeding up the manual recovery steps. Full details below 👇 https://t.co/0HwUkJWhJY
Want to play around with the xz backdoor? We have a quick blog post detailing how to make a vulnerable Kali install and validate if your system is or is not vulnerable.
https://t.co/EvmzMvvYSO
The xz package, starting from version 5.6.0 to 5.6.1, was found to contain a backdoor. The impact of this vulnerability affected Kali between March 26th to March 29th. If you updated your Kali installation on or after March 26th, it is crucial to apply the latest updates today.
A lot of people are skeptical about how useful LLMs are in bug finding, but our latest work accepted by OOPSLA improves static analysis with LLMs to detect UBI bugs in practice. We've uncovered some new bugs in the Linux kernel! #LLift#BugDetection#LLM#StaticAnalysis#Linux