[German]The Nirsoft tools are probably known to many Windows users. What is less known: The tools come along with nasty DLL hijacking vulnerabilities and should rather be avoided. The topic has been bogged down here for quite some time and I have put it off…

Custom implementation of DbgHelp's MiniDumpWriteDump function. Uses static syscalls to replace low-level functions like NtReadVirtualMemory. - GitHub - w1u0u1/minidump: Custom implementatio...

Unlocking Serverless Computing to Assess Security Controls - GitHub - Azure/Cloud-Katana: Unlocking Serverless Computing to Assess Security Controls

Let’s discuss about this interesting XSS challenge, that was shared yesterday by Gareth Heyes! Read on to learn a neat Javanoscript trick :)

WebStor efficiently enumerates all websites across your organization’s networks and those in your DNS records - including cloud-hosted servers via zone transfer data - stores their responses, and l...

Let’s see what the dev’s have cooked up at Intigriti today! A damn vulnerable & broken Flask application. Let’s hack it for Fun & Learning!

Really can protect from ransomware encryption? Contribute to eddiechu/Encrypt-Delete-Test development by creating an account on GitHub.

AFL binary instrumentation. Contribute to GJDuck/e9afl development by creating an account on GitHub.

Let’s talk about the term Security by Obscurity and I can bet that you don’t understand it fully! And I will help you clear your…

Censors pose a threat to the entire Internet.

rConfig 3.9.6 chained exploits

Encrypted PE Loader Generator. Contribute to frkngksl/Huan development by creating an account on GitHub.

Let me share my experience on how I do research on a topic. I would be happy to know your methodology as well :)

In this intrusion, we will take a look at a Trickbot infection, where soon after gaining access, the threat actor started to enumerate the target network and dump credential information. A setup file, which attempted to masquerade as a legitimate software…

Censors pose a threat to the entire Internet.

At least 65 vendors affected by severe vulnerabilities that enable unauthenticated attackers to fully compromise the target device.

The security account manager (SAM) file contains the password hashes of the users on a Windows system. Since it is considered a sensitive file SYSTEM level privileges are required to view its conte…

An in-depth look at Prototype Pollution vulnerabilities and how to mitigate them.