This is an explanation of the BEAST attack. For more details, check this blog: http://commandlinefanatic.com/cgi-bin/showarticle.cgi?article=art027

Microsoft exposed their users to a lot of risks when they released Windows Defender without a sandbox. This surprised me. Sandboxing is one of the most effective security-hardening techniques. Why …

by Anton Lopanitsyn (Wallarm Research Team)

Contribute to HUNT development by creating an account on GitHub.

1 points and 0 comments so far on reddit

ReactJS is a popular JavaScript library for building user interfaces. It enables client-rendered, “rich” web apps that load entirely…

Edit: The following day, I loaded another set of passwords which has brought this up to 320M. More on why later on. Last week I wrote about Passwords Evolved: Authentication Guidance for the Modern Era with the aim of helping those building services which…

Bipartisan bill would establish minimum requirements for Internet-connected devices purchased by the federal government

Few expected the money would ever move out of the accounts, as they were surely watched by law-enforcement agencies around the world.

Cheeky executables, both MD5 and SHA1 hashes are equal , different run output (“Eat more hashes” Challenge Write-Up)

3652fa - Office 365 MFA capture toolkit

This blogpost is a write-up of some online challenges we managed to solve during the DEFCON 25 Recon Village OSINT CTF.

Marcus Hutchins, AKA MalwareTech, previously registered a specific domain included in the ransomware’s code, which stopped the malware from spreading.

Marcus Hutchins, AKA MalwareTech, previously registered a specific domain included in the ransomware’s code, which stopped the malware from spreading.

In my previous VMware blog, I detailed how to exploit a Use-After-Free
vulnerability that affected drag-and-drop functionality and triggered
through the Backdoor RPC interface. After reading it, one of my ZDI
colleagues, Vincent Lee, asked me to add…

CheckPlease - Payload-Agnostic Implant Security

Today we’re releasing a tool called Nessus Compliance Generator as open source under the BSD License.  The full code can be found on the Argonne National Laboratory github. Nessus has many options to check for audit and compliance issues on

android_unpacker - A (hopefully) generic unpacker for packed Android apps.