A Holistic OSINT and Threat Hunting Platform. Contribute to matamorphosis/Scrummage development by creating an account on GitHub.

Kitploit is temporarily under maintenance. We’ll be back shortly with improvements.

Cloudflare, Sucuri, Incapsula real IP tracker. Contribute to mrh0wl/Cloudmare development by creating an account on GitHub.

This is the first video about Steganography challenges in the Forensics Category.
#ctf #IceCTF #Forensics #QRCode #images #steganography #challenge #bugbounty #hackers #CTFtips #bugbountytips #IceCTF

What is Apache Skywalking
Application performance monitor tool for distributed systems, especially designed for microservices, cloud native and container-based (Docker, Kubernetes, Mesos) architectures.

Vulnerability in Apache Skywalking
In GraphQL interfaces…

Central Bank Digital Currencies will ransom our future

It's been a few month since I released Responder DHCP 3.0.7.0 exclusively on @porchetta_ind. It's now free for everyone to use. Enjoy that module, and make sure to update Responder.conf as previously mentioned before using it (g-laurent.blogspot.com/2021/08/respon…).…

On September 13, 2021, Google released version 93.0.4577.82 of Chrome. The release note specified that two of the security fixed bugs, CVE-2021-30632 and CVE-2021-30633, are being exploited in the wild (both reported by anonymous researchers). CVE-2021-30632…

It seems that Veeder-root products are popular in Iran. They are not secure by design and hacking into one of them is not very hard. Previously we warned about this kind of attack in one of our research papers. dl.acm.org/doi/10.1145/33… twitter.com/DarkReading/st…

Grief ransomware group has ransomed the National Rifle Association (NRA).

In this video, we dive into prototype pollution vulnerability and going to solve recent CTFs Related to this bug.
#prototype_pollution #snyk #snykcon2021 #redpwn2019 #Invisible #Ink #Invisible_Ink #prototypepollution #CTF #hacker #bugbounty #ctfplayer #Snyk2021…

Learn how to use Burp Suite's web scanner and crawler tools for identifying vulnerabilities and mapping web applications now.

In this stream I went through the process of C# source code modification, and reflective loading of C# Assemblies from Powershell. Afterwards, two public reflective PE-Loaders and the use-case with examples were shown. In the very end unhooking + ETW patching…

#ESETresearch discovered a trojanized IDA Pro installer, distributed by the #Lazarus APT group. Attackers bundled the original IDA Pro 7.5 software developed by @HexRaysSA with two malicious components. @cherepanov74 1/5

Golden Guide. Contribute to 0xCGonzalo/Golden-Guide-for-Pentesting development by creating an account on GitHub.

CVE-2021-35042: Potential SQL injection via unsanitized QuerySet.order_by() input. Unsanitized user input passed to QuerySet.order_by() could bypass intended column reference validation in path marked for deprecation resulting in a potential SQL injection…