Gitpaste-12 malware has many different ways of spreading itself to potential victims, and could be the first stage of a multi-stage hacking campaign.

One hacker group that is targeting high-revenue companies with Ryuk ransomware received $34 million from one victim in exchange for the decryption key that unlocked their computers.

PsExec is another powerful tool created by Windows Sysinternal. It was created to allow Administrators to remotely connect to and manage Windows systems. Because of the power of PsExec, many different malware actors have used it in various forms of malware…

Details on CVE-2020-8705, a TOCTOU attack against the Bootguard hardware root of trust in Intel x86 systems when they resume from S3 sleep.

Update 25.01.2021: Added Google engineers exploit method for getting access token.   Google Cloud Monitoring (formerly called Stackdriver)...

This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), ar...

Hey everyone, didn’t get time this year to blog about my findings. But this one, i found around 2–3 months back , it was interesting case…

In this write-up, we’ll see how I identified a remote code execution vulnerability and bypassed the Akamai WAF rule(s). While I was doing…

Tor Binary in Android as a Library. Contribute to mirsamantajbakhsh/TorAndroid development by creating an account on GitHub.

Burpsuite Extension to bypass 403 restricted directory - sting8k/BurpSuite_403Bypasser