Iran comes under cyber-attack again, a massive offensive brought down a large portion of the Iranian access to the Internet.

Assalam u Alikum, it’s been a while I haven’t contributed to this wonderful community so I am back with a new write up about WebSocket…

The man who hacked into a criminal call centre to expose scammers at work.

In this post, I’ll be describing how I found 5 bugs on a private HackerOne program. The website that I attacked was a new CTF hosting…

One morning, I was asked to participate in a private bug bounty program. In general, my experience in security is based on such private…

I have recently come across a technique to force a Cloudfoundry app to return a HTTP 404 error when requesting any resource, which contains cache friendly headers. What this means is, if the...

Vậy là ngày 05/03 vừa rồi, ZDI đã publish bài phân tích chi tiết về CVE-2020–2555…

A Dutch researcher claimed Google's very firstl annual Cloud Platform bug-bounty prize, for a clever container escape exploit.

Hi, Memcached team, Recently, I revealed a buffer overflow vulnerability which may cause DOS attack. The exploit details can be found as following. Affect Version memcached-1.6.0 memcached-1.6.1 Ro...

Onion Balance is a tool which is used for load balancing in Tor anonymity service. In this tutorial, I'm going to serve two hidden (web) services behind the OnionBalance load balancer.

Check more videos on my YouTube Channel. More information can be found…

CVE-2020-???? Contribute to b1ack0wl/Edge0day.exe development by creating an account on GitHub.

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe... - hisxo...

Thanks Twitter Security Team again :) The details can be found here!
* [Attacking SSL VPN - Part 3: The Golden Pulse Secure SSL VPN RCE Chain, with Twitter as Case...