Cheeky executables, both MD5 and SHA1 hashes are equal , different run output (“Eat more hashes” Challenge Write-Up)

3652fa - Office 365 MFA capture toolkit

This blogpost is a write-up of some online challenges we managed to solve during the DEFCON 25 Recon Village OSINT CTF.

Marcus Hutchins, AKA MalwareTech, previously registered a specific domain included in the ransomware’s code, which stopped the malware from spreading.

Marcus Hutchins, AKA MalwareTech, previously registered a specific domain included in the ransomware’s code, which stopped the malware from spreading.

In my previous VMware blog, I detailed how to exploit a Use-After-Free
vulnerability that affected drag-and-drop functionality and triggered
through the Backdoor RPC interface. After reading it, one of my ZDI
colleagues, Vincent Lee, asked me to add…

CheckPlease - Payload-Agnostic Implant Security

Today we’re releasing a tool called Nessus Compliance Generator as open source under the BSD License.  The full code can be found on the Argonne National Laboratory github. Nessus has many options to check for audit and compliance issues on

android_unpacker - A (hopefully) generic unpacker for packed Android apps.

Hey, guys (and gals)! Long time no see. I 've been working hard on several projects and stuff lately so I was just an observer all that time. Observing this page and several projects starting on github, I was really impressed with how many backdoor projects…

Automating lateral movement with ANGRYPUPPY

Getting Stealthy with Stelf Hello 0x00'ers! In this tutorial, I am going to be giving away some content that has been sought after for a long time. Everybody knows that most prebuilt tools such as Metasploit don't work, payloads generated by them, or…

Today, a dangerous new trend is emerging: steganography is increasingly being used by actors creating malware and cyber-espionage tools. Most modern anti-malware solutions provide little, if any, protection from steganography, while any carrier in which a…

Doyensec's Blog :: Doyensec is an independent security research and development company focused on vulnerability discovery and remediation.

3 points and 0 comments so far on reddit

Automobile hacking is one of the leading edge areas of our hacking discipline. As our automobiles have become smarter and smarter, they include more and more el...

1 points and 2 comments so far on reddit

Read Accenture's report about how US government agencies are confident in their overall cybersecurity strategies.