This is the second part of a blog about putting a WiFi router into a phone charger; please see part zero here and feel free to join our…

Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.

Posted in r/netsec by u/0xdea • 1 point and 0 comments

Posted in r/netsec by u/root_at_remote_host • 1 point and 0 comments

Active Directory Certificate Services (ADCS) have never really been under security scrutiny until a few years ago (by C. Falta and later Q&D Security). We will therefore focus today on how similar techniques can be used to gain Domain Admins privileges.

In this article we will dive into Network Traffic visualization using the Python programming language, Wireshark and Google Maps. This…

CVE/Research Publications. Contribute to 1d8/publications development by creating an account on GitHub.

Active Directory Certificate Services has a lot of attack potential!

In this episode, Ben interviews Feross Aboukhadijeh about Wormhole. Wormhole is a file sending tool that lets you quickly share files with end-to-end encryption and a link that automatically expires. So you can keep what you share private and make sure your…

As security teams continue to advance, it has become essential for attacker’s to have complete control over every part of their operation, from the infrastructure down to individual actions that...

Into

Scapy Turned 18 Boy They Grow Up Fast, Don’t They! Abstract: Scapy (https://www.scapy.net), a program written in Python simplifying the handling of network packets, is 18 years old in 2021. Through this keynote, and on the occasion of the first commit made…

Introduction 2 Factor Authentication is a subset of the multi factor authentication service that we see mainly in FinTech Apps. Some financial technology apps ask the user to enter a password, and MPIN, a TPIN, and finally another OTP based authentication…

Avanan researchers have uncovered an attack that takes advantage of an exploit in Google Docs

© Pirate Bay In a report, SophosLab said it learned of the existence of malware intended to prevent its victims from downloading illegally. Active between October 2020 and January 2021, this malwar…

red team, blue team, penetration testing, red teaming, threat hunting, digital forensics, incident response, cyber security, IT security