Cyber Guardians

Public

Can't Join? @IRCyberGuardians

19.2k Members

Updated: September 7, 2026 at 6:53 PM

Cyber Guardians

RedTeaming TTPs Bug Hunting Web PenTest Web Security Binary Analysis Exploit DEV Malware DEV Malware Analysis BlueTeaming Threat Hunting SOC CSIRT FORENSICS Open-Source Intelligence(OSINT) Cybersec Tools

Join @IRCyberGuardians for exclusive analysis and malware content and discussions in 21

Ranking

Global Ranking

#46358

-370

Language Ranking

#908

-8

Category Ranking

#120No change

Participant Growth (Last 15 Days)

Total: 19.2K

24h growth: -2 0%

Latest Posts

Cyber Guardians

9. Sept. 2026, 13:33

Escaping Google Cloud Application Integration Sandbox: Straight into Borg

https://nopnop.pro/2026/08/26/escaping-google-cloud-application-integration-sandbox/

975

Cyber Guardians

9. Sept. 2026, 13:33

The Art of Business Logic — When the Checkout Got the Price Wrong

https://zuksh.medium.com/the-art-of-business-logic-when-the-checkout-got-the-price-wrong-4d548971b4a3

1,090

Cyber Guardians

9. Sept. 2026, 13:33

Plausible Analytics: Pre-Auth RCE, Cross-Tenant IDORs, and SSRF-to-RCE

https://whoareme.com/blog/plausible-analytics-multiple-criticals/

1,360

Cyber Guardians

9. Sept. 2026, 13:33

Pre-Auth RCE in UniFi OS - CVE-2026-34909: One Request to Root Behind Seven Products ($42,751)

https://www.catchify.sa/post/pre-auth-rce-unifi-os-one-request-to-root

815

Cyber Guardians

9. Sept. 2026, 13:33

Hacking SAML with Claude Code

https://oblique.security/blog/hacking-saml/

897

Cyber Guardians

9. Sept. 2026, 13:33

Apple Screen Sharing Pre-Auth RCE

https://warez.sl0p.foo/apple-screensharing-rce/

799

Cyber Guardians

9. Sept. 2026, 13:33

Beyond Prompt Injection: Hacking Apple's Private Cloud Compute

https://blog.sentry.security/beyond-prompt-injection-hacking-apples-private-cloud-compute/

946

Cyber Guardians

9. Sept. 2026, 13:33

Chaining IDOR to Privilege Escalation: A $$$$ Microsoft Bug Bounty

https://medium.com/@dsmodi484/chaining-idor-to-privilege-escalation-a-microsoft-bug-bounty-936656cf47a2

739

Cyber Guardians

9. Sept. 2026, 13:33

Confused Deputy: Google IdP Universal Account Takeover via Device Code Flow Hijacking

https://weirdmachine64.github.io/research/google-oauth-device-code-hijacking.html

700

Cyber Guardians

9. Sept. 2026, 13:33

How to use Claude Code for Bug Bounty: find fast, validate manually
https://www.yeswehack.com/learn-bug-bounty/llm-series-claude

737

Cyber Guardians

25. Aug. 2026, 07:30

CVE-2026-58532: An Integer Overflow in Windows tcpip.sys

Original text: “How I found an integer overflow in tcpip.sys (CVE-2026-58532)” — April Ivy (aprilpet), April Ivy’s Writing ( http://aprl.pet/), 17 July 2026. The prose below is a paraphrase; the call stack, code snippets and proof-of-concept are reproduced verbatim with attribution.

Executive Summary

Security researcher April Ivy discovered an unsigned 64-bit integer overflow in tcpip.sys, the…

https://core-jmp.org/2026/07/cve-2026-58532-tcpip-sys-integer-overflow/

773

Cyber Guardians

25. Aug. 2026, 07:30

CVE-2026-58629: A Double-Free in dxgkrnl’s CreateAllocation Rollback

Original text: “July 2026 Patch Tuesday [CVE-2026-58629] Freeing the Wrong Allocation: a double-free in dxgkrnl’s CreateAllocation rollback” — gengstah, gengstah (personal blog), July 14, 2026. Disassembly, crash dumps and code below are reproduced verbatim with attribution captions.

Executive Summary

CVE-2026-58629 is a local elevation-of-privilege bug in dxgkrnl, the Windows Display Driver Model (WDDM) kernel component…

https://core-jmp.org/2026/07/cve-2026-58629-dxgkrnl-createallocation-double-free/

1,130

Cyber Guardians

25. Aug. 2026, 07:30

Direct $MFT Parsing: Reading NTFS Below the Monitored API Layer

Original text: “Direct $MFT Parsing” — S12 — 0x12Dark Development, on Medium. This article summarises the technique in our own words for readers of http://core-jmp.org/; the ASCII pipeline diagram and the short C++ excerpts below are reproduced with attribution to illustrate the discussion. For the complete C++17 header, main runner, and YARA rule, follow the…

https://core-jmp.org/2026/07/direct-mft-parsing-ntfs-raw-enumeration

737

Cyber Guardians

25. Aug. 2026, 07:30

CET-Compliant Callstack Spoofing via Thread Pool Enum Callback Trampolining

Original text: “CET-Compliant Callstack Spoofing via Thread Pool Enum Callback Trampolining” — Tiziano Marra, Tiziano’s Cybersecurity Blog (12 July 2026). Code blocks, tables, and figures below are reproduced verbatim with attribution captions.

Research published for educational and defensive purposes. Always obtain explicit written authorization before testing security techniques on any computer system. Unauthorized access is…

https://core-jmp.org/2026/07/cet-compliant-callstack-spoofing-thread-pool-enum/

1,040

Cyber Guardians

25. Aug. 2026, 07:30

The QNAP Pattern: Four Bugs and the Architecture That Keeps Producing Them

Original text: “The QNAP Pattern” — Runic Labs (May 17, 2026). Code and architecture diagrams below are reproduced with attribution.

Executive Summary

Runic Labs disassembled a full disclosure cycle against QNAP’s QTS operating system—four bugs across three App Center plugins (Notes Station 3, QmailAgent, QVPN) spanning two firmware releases—and found that the individual vulnerabilities matter…

https://core-jmp.org/2026/07/qnap-pattern-architecture-vulnerabilities/

1,130

Cyber Guardians

25. Aug. 2026, 07:30

CVE-2026-50343
InstallService StaticPluginMap EoP (Standard User to SYSTEM)

https://github.com/Rat5ak/CVE-2026-50343-InstallService-EoP

807

Cyber Guardians

25. Aug. 2026, 07:30

Process Parameter Poisoning: EDR Evasion via Windows Process Startup Parameters

Original text: “Process Parameter Poisoning” — Max Hirschberger & Ogulcan Ugur, SensePost / Orange Cyberdefense (6 July 2026). Code listings and figures are reproduced verbatim with attribution captions.

Executive Summary

Process Parameter Poisoning (P3) is a code injection technique that transfers shellcode into a foreign process via the startup parameters of CreateProcessW—specifically the lpCommandLine, lpEnvironment,…

https://core-jmp.org/2026/07/process-parameter-poisoning-edr-evasion-windows/

792

Cyber Guardians

25. Aug. 2026, 07:30

Two Bytes to RCE: Chaining Rift + PoolSlip into an ASLR-Independent nginx 1.30.0 Exploit

Original text: “Two Bytes to RCE: Chaining Rift + PoolSlip” — y198, Verichains (Jun 06, 2026). Code, tables and figures below are reproduced verbatim with attribution captions. PoC: http://github.com/y198nt/Nginx-chain-Rift-Poolslip.

Executive Summary

A two-bug chain in nginx 1.30.0 achieves unauthenticated remote code execution without relying on ASLR breaks. The first bug, CVE-2026-42945 (“Rift”), is a forward…

https://core-jmp.org/2026/07/nginx-rce-rift-poolslip-aslr-independent/

854

Cyber Guardians

25. Aug. 2026, 07:30

Januscape: Guest-to-Host Escape in KVM/x86

https://github.com/V4bel/Januscape

1,040

Cyber Guardians

25. Aug. 2026, 07:30

The Dark Side of WebAssembly: Cryptomining, Keyloggers, and Browser Exploitation

Original text: “El lado oscuro de WebAssembly” — Carlos Ávila, Telefónica Tech Blog (September 16, 2020). Images are reproduced verbatim with attribution captions.

Executive Summary

WebAssembly (WASM) is an open binary instruction format — announced in 2015 and broadly supported by browsers from 2017 onward — designed to let code written in C, C++, Rust,…

https://core-jmp.org/2026/07/dark-side-webassembly-cryptomining-keyloggers-browser-exploitation/

936

Cyber Guardians

24. Mai 2026, 16:54

New Android interception tool for component communication (IPC) mapping called #noxen for pentesters and bug bounty hunters
Test: https://youtube.com/shorts/JitFuNRCOJ8
Download: https://github.com/frankheat/noxen

842

Cyber Guardians

24. Mai 2026, 16:54

Qilin EDR killer infection chain

https://blog.talosintelligence.com/qilin-edr-killer/

668

Cyber Guardians

24. Mai 2026, 16:54

EntryPoint Hijacking
https://ipurple.team/2026/05/13/entrypoint-hijacking/

669

Cyber Guardians

24. Mai 2026, 16:54

Go fuzzing was missing half the toolkit. We forked the toolchain to fix it.

https://blog.trailofbits.com/2026/05/12/go-fuzzing-was-missing-half-the-toolkit.-we-forked-the-toolchain-to-fix-it./

733

Cyber Guardians

24. Mai 2026, 16:54

YellowKey Bitlocker Bypass Vulnerability

https://github.com/Nightmare-Eclipse/YellowKey

825

Cyber Guardians

24. Mai 2026, 16:54

Steal SSH host private keys and /etc/shadow via the ptrace_may_access mm-NULL bypass + pidfd_getfd. Pre-31e62c2ebbfd kernels.

https://github.com/0xdeadbeefnetwork/ssh-keysign-pwn/tree/main

984

Cyber Guardians

24. Mai 2026, 16:54

AI-Powered Reverse Engineering Plugin for IDA Pro

https://github.com/symgraph/IDAssist

790

Cyber Guardians

24. Mai 2026, 16:54

https://github.com/Nightmare-Eclipse/GreenPlasma

Windows CTFMON Arbitrary Section Creation Elevation of Privileges Vulnerability

659

Cyber Guardians

24. Mai 2026, 16:54

https://github.com/v12-security/pocs/tree/main/fragnesia

Universal Linux local privilege escalation exploit. Fragnesia is a member of the Dirty Frag vulnerability class. This is a separate bug in the ESP/XFRM from dirtyfrag which has received its own patch. However, it is in the same surface and the mitigation is the same as for dirtyfrag.

It abuses a logic bug in the Linux XFRM ESP-in-TCP subsystem to achieve arbitrary byte writes into the kernel page cache of read-only files, without requiring any race condition.

662

Cyber Guardians

24. Mai 2026, 16:54

https://github.com/DepthFirstDisclosures/Nginx-Rift

CVE-2026-42945, a critical heap buffer overflow in NGINX's ngx_http_rewrite_module introduced in 2008. The bug enables unauthenticated remote code execution against servers using rewrite and set directives.

693

Showing 30 of 80 posts

Rating

User Reviews (0)

No reviews yet. Be the first to share your experience!

Related Telegram Channels

Loading recommended channels...

Cyber Guardians

Cyber Guardians

Ranking

Participant Growth (Last 15 Days)

Latest Posts

Rating

User Reviews (0)

Related Telegram Channels

𝓳𝓳'𝓼 𝓬𝓵𝓸𝓼𝓮𝓽 🪽

Smart Risk Free

Cyberpunk Edgerunners

Cyberpunk: Edgerunners

IHMA Navoiy viloyati

AXION resist

𝗖𝘆𝗯𝗲𝗿 𝗧𝗩 - 𝗢𝗳𝗳𝗶𝗰𝗶𝗮𝗹

cRyPtHoN™ INFOSEC (EN)

Related Telegram Channels

𝓳𝓳'𝓼 𝓬𝓵𝓸𝓼𝓮𝓽 🪽

Smart Risk Free

Cyberpunk Edgerunners

Cyberpunk: Edgerunners

IHMA Navoiy viloyati

AXION resist

𝗖𝘆𝗯𝗲𝗿 𝗧𝗩 - 𝗢𝗳𝗳𝗶𝗰𝗶𝗮𝗹

cRyPtHoN™ INFOSEC (EN)

Latest Posts

User Reviews (0)