Technical blog by Stephan Berger (@malmoeb)

Stepping in to claim the throne, DarkForums swiftly absorbed much of BreachForums' user base, adopting its design and expanding its reach. Now operated by the administrators AnonOne and Knox, DarkForums has evolved into a major hub for data leaks, malware…

Reverse Shell

How I reverse engineered an ESP32-based smart home device to gain remote control access and integrate it with Home Assistant.

Chromium Browser DoS Attack via document.noscript Exploitation - jofpin/brash

Chimera is a PowerShell obfuscation noscript designed to bypass AMSI and commercial antivirus solutions. - tokyoneon/Chimera

Pixnapping is a new class of attacks that allows a malicious Android app to stealthily leak information displayed by other Android apps or arbitrary websites. Pixnapping exploits Android APIs and a hardware side channel that affects nearly all modern Android…

On Monday morning it was announced that WPA2, WiFi’s most popular encryption standard, had been cracked. A new attack method called KRACK (for Key Reinstallation AttaCK) is now able to break WPA2 e…

Bitdefender reveals new tools and techniques used by the Curly COMrades threat actor, a group that establishes covert, long-term access to victim networks.

Universal exploitation tool for CVE-2025-33073 targeting Windows Domain Controllers with DNSAdmins privileges and WinRM enabled. - uziii2208/CVE-2025-33073

Perplexity is repeatedly modifying their user agent and changing IPs and ASNs to hide their crawling activity, in direct conflict with explicit no-crawl preferences expressed by websites.

CISOs face mounting stress, unrealistic demands, and limited resources—driving record burnout. Learn why protecting their well-being is a cybersecurity imperative.

UAC Bypass using UIAccess program QuickAssist. Contribute to R41N3RZUF477/QuickAssist_UAC_Bypass development by creating an account on GitHub.

From Frankfurt to WIRED

FindME is a CLI tool for searching social media and online profiles linked to a username. It’s ideal for reconnaissance, digital footprint verification, or checking username availability. - 0xSaika...

Join Advent of Cyber 2025 by TryHackMe. 24 beginner-friendly cyber security challenges, starting December 1st, with over $150,000 in prizes.

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here. - trustedsec/social-engineer-toolkit