EMBA - The firmware security analyzer. Contribute to e-m-b-a/emba development by creating an account on GitHub.

A clear explanation for why asset management is so critical to a company's security posture, and why it should always be step zero.

A community for technical news and discussion of information security and closely related topics.

Posted in r/netsec by u/ScottContini • 1 point and 0 comments

HUB Security announced its Docker Digital Twin product to protect, authenticate, and verify traffic created by Docker.

If you're reading this you're underslept and over-caffeinated due to log4j. Thank you for your service. I have some good news. I know a super-smart guy

Introducing a minimalistic Meterpreter stager written in Go (letme.go), useful in red teaming engagements.

Twitter: @s4tan Download: https://github.com/enkomio/AlanFramework Documentation: https://github.com/enkomio/AlanFramework/tree/mai...

Everyone heard of log4j by now

Wireless and hardware security, firmware, mobile, pentest, trainings, development, hacking

The Visual Studio Code server in Windows Subsystem for Linux uses a local
WebSocket WebSocket connection to communicate with the Remote WSL extension.
JavaScript in websites can connect to this server and execute arbitrary commands
on the target system. Assigned…

Leaders in Information Security

I wanted to write this blog post to talk a bit about Cobalt Strike, function hooking and the Windows heap.  We will be targeting BeaconEye (https://github.com/CCob/BeaconEye) as our detection tool...

Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps. - GitHub - mufeedvh/moonwalk: Cover your tracks during Linux Exploitation by leaving zer...

Posted by James Wetter and Nicky Ringland, Open Source Insights Team  Editors Note: The below numbers were calculated based on both log4j-co...