Abstract Naive use of the extremely popular JavaScript framework AngularJS is exposing numerous websites to Angular Template Injection. This relatively low profile sibling of server-side template inje

On April 18th, during our regular security audit of nonSql databases with BinaryEdge search engine, I have discovered an open […]

APT34 hacking tools and victim data leaked on a secretive Telegram channel since last month.

What is PDFReacter?  - PDFReacter is a parser which parses HTML content from HTML to PDF.

A completely free, open source and online course about Reverse Engineering iOS Applications. https://t.co/5M8vnp5fdW

Hi Guys, Back with an interesting hack that I was eagerly waiting to get the writeup to publish. This hack is about a chain of…

Hello Guys! This is my first write up, I hope it would be informative. This article is about bug, i recently found on the private program…

In this post I am going to walk you through 3 CTF challenges from UUTCTF 2019, 2 Forensics and 1 Misc. I was so excited to solve these…

A few years ago I discovered a technique to call functions in JavaScript without parentheses using onerror and the throw statement. It works by setting the onerror handler to the function you want to

Cyberus Technology - Where Virtualization Meets German Engineering

Ever wonder how a credit card works? Well it is just a magnetic strip like a cassette tape. There have been pocket sized credit sized card cloners forever but I just wanted to point out how basic the technology is. I don’t really care if they upgrade the…

I’m going to go over an interesting feature abuse that could have been used to steal and even manipulate downloads from Slack users using the Slack desktop app on Windows. The vulnerability was…

Exploitation and mitigation bypasses for the new Drupal 8 RCE (SA-CORE-2019-003, CVE-2019-6340), targeting the REST module.