In the past few months, a new wave of cyberattacks has been flooding Iran. These attacks are far from minor website defacements – the recent wave is hitting national infrastructure and causing major disruptions to public services. This article provides an…

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax ) - SnaffCon/Snaffler

Hacking Hackers - Even the software used by teams of offensive security professionals is prone to standard web application vulnerabilities.

Evading user mode EDR hooks by hijacking the AppVerifier layer

Shadow Dumper is a powerful tool used to dump LSASS memory, often needed in penetration testing and red teaming. It uses multiple advanced techniques to dump memory, allowing to access sensitive da...

DarkFlare Firewall Piercing (TCP over CDN). Contribute to doxx/darkflare development by creating an account on GitHub.

Complete list of LPE exploits for Windows (starting from 2023) - MzHmO/Exploit-Street

The work overturns assumptions about the security of underwater communications

Two new papers show how our external and automated red teaming efforts are advancing to help deliver safe and beneficial AI

KIA SELTOS Cluster Exploitation. Contribute to nitinronge91/KIA-SELTOS-Cluster-Vulnerabilities development by creating an account on GitHub.

Discover how reverse engineering led to a $5000 bounty by exploiting a critical vulnerability in a popular Android app