Only after I had published a post detailing three iOS 0-day vulnerabilities and expressing my frustration with Apple Security Bounty Program, I received a reply from Apple:We saw your blog post...

The Art of Bug Bounty, Bug Bash and Reporting

In this video we would be abusing VT as a downloader. We would use a simple PowerShell one liner, base64 it and then chunk into 250 characters and create dummy files…

There’s now more money and information stored digitally than physically. Secrets unlock the infrastructure holding millions of dollars and…

Private proof-of-vaccination app Portpass exposed personal information, including the driver's licences, of what might be hundreds of thousands of users by leaving its website unsecured. 

Do you think that Telegram servers are coded by monkeys?

Cybersecurity via offshore IT developers can help your business stay safe. Remove vulnerabilities & prevent your app, website, enterprise software from hackers.

A hacker manifest Real-World Scenarios, Labs, and Attacks

all paths lead to clouds. Contribute to ovotech/gitoops development by creating an account on GitHub.

Human readable timestamps

TLS.support is a free diagnostic tool and REST API for testing browser and client TLS version and cipher support. The service also checks browsers and clients for common TLS-related issues and misconfigurations.

Fake Protocol Server. Contribute to fofapro/fapro development by creating an account on GitHub.

Cloud-native applications have evolved into a standardized architecture consisting of multiple loosely coupled components called microservices (implemented as containers), supported by code for providing application services called service mesh. Both of these…

Fake Protocol Server. Contribute to fofapro/fapro development by creating an account on GitHub.

Crucial's Ballistix MOD Utility v.<= 2.0.2.5 is affected by multiple Privilege Escalation (LPE) vulnerabilities in the MODAPI.sys driver.

In this post, I’ll exploit a use-after-free (CVE-2021-30528) in the Chrome browser process that I reported to escape the Chrome sandbox. This is a fairly interesting bug that shows some of the subtleties involved in the interactions between C++ and Java in…

The vast majority of websites now support encrypted connections over HTTPS. This prevents eavesdroppers from monitoring or tampering with people’s web activity and is great for privacy. However, HTTPS is optional, and all browsers still support plain unsecured…

Network, recon and offensive-security tool for Linux systems. - GitHub - medpaf/hawk: Network, recon and offensive-security tool for Linux systems.