Posted in r/netsec by u/gid0rah • 119 points and 4 comments

If you can’t power on your mobile device, Apple has no answers for you. But you can still obliterate the data. Here’s how.

A complete and updated timeline of the recorded and documented bitcoin & crypto exchange hacking incidents, dating back to as early as 2011.

SharpHook is an offensive API hooking tool designed to catch various credentials within the API call. - GitHub - IlanKalendarov/SharpHook: SharpHook is an offensive API hooking tool designed to cat...

Enter a short denoscription of the course.

An
incomplete list of (technical) things just about anybody working
in Information Security would benefit from knowing.

Mistune is a remote exploit demostrated at TianfuCup 2020. It consists of two bugs that were introduced by iOS 3 and iOS 6 respectively

VPN's and Proxy Servers can be detected by comparing latencies measured with JavaScript in the browser with the corresponding latency of the TCP/IP handshake on the server.

Trading up a small bug for a big impact

Raelize company website!

Grab a copy of Mscan, and launch it on the air-gapped Windows machine. Mscan is a simple VirusTotal lookup tool,
with a pretty unusual feature: it supports malware checks on air-gapped computers, through the use of high-density QR codes.
It requires no…

Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.

Userland API Unhooker Project. Contribute to frkngksl/Celeborn development by creating an account on GitHub.

In this article, we'll examine how effective CET is at mitigating real-world exploits that make use of ROP or stack based buffer overflow vulnerabilities.

Hi, I’m stypr (@stereotype32) from Flatt Security Inc. As I mentioned earlier in the previous article「Flatt Securityは“自分のやりたいことが実現できる”場所／セキュリティエンジニア stypr - Fla…

Libraries and tools to perform fully homomorphic encryption operations on an encrypted data set. - GitHub - google/fully-homomorphic-encryption: Libraries and tools to perform fully homomorphic enc...

When self study for OSCP certification,I stumble upon HTB machine that have CVE-2019-17420 vulnerability. I look for public exploit and there was one written in python. As challenge for me self was to recreate this exploit in golang. So lets get started.

Penetration testing, one of the great aspects of cybersecurity, working in different projects will increase your contact with large and…

iosiro identified a critical bug in the fixed-interest-rate lending protocol 88mph. The bug was reported to 88mph through Immunefi for a bounty of $42,069. This blog post details the bug and the disclosure process.