Last week, the hacking crew "JHT" launched a hacking campaign exploiting Cisco CVE-2018-0171 flaw against network infrastructure in Russia and Iran.

Hey! Here we go for another write up, but this time with some friends :D This is the work of MalwareMustDie feat NibbleHunters! Greetz to...

A critical remote code execution vulnerability has been discovered in CyberArk Enterprise Password Vault application that could allow an attacker to gain unauthorised access to the system with the privileges of the web application.

Deserialization payload generator for a variety of .NET formatters - pwntester/ysoserial.net

Reverse engineering WhatsApp Web. Contribute to sigalor/whatsapp-web-reveng development by creating an account on GitHub.

There are a lot of tutorials out there about exploitation of memory corruption bugs, but I struggled to find step-by-step ones, that would s...

In part 1 we've covered basic mechanisms of exploitation, but there is one caveat about example from part 1, that is we are not executing ou...

This is continuation of my guide on binary exploitation, in this part we are going to cover return-to-libc attack which was invented to defe...

5 points and 3 comments so far on reddit

MEGA provides free cloud storage with convenient and powerful always-on privacy. Claim your free 20GB now

A new wave of document attacks targeting inboxes do not require enabling macros in order for adversaries to trigger an infection chain that ultimately delivers FormBook malware.