My aim for this post is to provide some insights for getting into Linux kernel vulnerability research and exploit development

Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in …

Michael Rand, one of White Oak Security’s penetration testing experts, demonstrates how to exploit GraphQL batching attacks using Turbo Intruder. Learn more..

iPhone 11 emulated on QEMU. Contribute to TrungNguyen1909/qemu-t8030 development by creating an account on GitHub.

Provides information about how to achieve Secured-core PC compliance with Firmware Attack Surface Reduction (FASR).

UNISOC (formerly Spreadtrum) is a rapidly growing semiconductor company that is nowadays focused on the Android entry-level smartphone market. While still a rare sight in the west, the company has …

Practical guide step by step to create golden SAML

SimpleX - the first messaging network operating without user identifiers of any kind - 100% private by design! iOS, Android and desktop apps 📱! - simplex-chat/simplex-chat

Arti 1.0.0 is released and ready for download.

WPHash indexes over 75 million SHA256 hashes for fingerprinting the exact version of WordPress plugins.

Rated a 7.8 high CVSS 3.x severity base score, CVE-2022-30190 takes advantage of the MSDT, an official tool built-in all versions of Windows. 

Retrieving SSN for syscalling in VBA following FreshyCalls technique - FreshyCalls-VBA.vba

TL;DR IHTeam undertook an independent security assessment of pfsense’s pfBlockerNG plugin version 2.1.4_26 and identified the following vulnerability: Unauthenticated Remote Command Execution as root (CVE-2022-31814) What’s pfBlockerNG pfBlockerNG (https…

Recently I came across an interesting cryptocurrency project called Helium. Its a wireless network built by people all around the world. The people that help expanding the network by adding a hotsp…