Learn the basics of computer science from Harvard University. This is CS50, an introduction to the intellectual enterprises of computer science and the art of programming. The course is taught live every year and this is the 2023 version.

💻 Slides, source…

CVE-2024-3400-RCE. Contribute to W01fh4cker/CVE-2024-3400-RCE-Scan development by creating an account on GitHub.

This blog covers 2 vulnerabilities discovered by Rhino Security Labs in Kemp LoadMaster load balancers: CVE-2024-2448 and CVE-2024-2449.

Obfuscated LSASS dumper command A quick walkthrough for a obfuscated PowerShell LSASS dump command via comsvcs.dll. tl;dr Malicious command detection for PowerShell is not easy. Pretty hard to tell, what the following command is going to do, huh? &$env:?…

Sha256 algorithm explained online step by step visually

In my recent red team project, i faced an MFA product securing RDP, ADFS, and Exchange. It seemed secure until I found vulnerabilities, including one that exposed TOTP QR codes for any user.
#Cybersecurity #RedTeam #PenetrationTesting

While working on a target, some of the most interesting parts to test is its API. APIs are dynamics, they get updated more often then…

How I found Authentication Bypass >> File upload vulnerability >> Arbitrary File Overwrite and how I managed I found the path of the file…

VIdeo of Voksi showing us how he can reverse engineering Denuvo V4 (in HD)

WordPress Auto Admin Account Creation and Reverse Shell cve-2024-27956 automates the process of creating a new administrator account in a WordPress site and executing a reverse shell on the target ...

CVE-2024-27956 WordPress Automatic < 3.92.1 - Unauthenticated SQL Injection - truonghuuphuc/CVE-2024-27956

Telemetry provides the most advanced search and analytics capabilities for telegram data

Mirror Switch Tool. Contribute to Sir-MmD/M-Switch development by creating an account on GitHub.

Orange Tsai tweeted a few hours ago about “One of [his] PHP vulnerabilities, which affects XAMPP by default”, and we were curious to say the least. XAMPP is a very popular way for administrators and developers to rapidly deploy Apache, PHP, and a bunch of…

Kaspersky Lab disclosed four zero-day vulnerabilities in iPhone software last year that were allegedly leveraged in a cyber-espionage campaign. The company said Apple declined to pay a reward.