Disclosure of uninitialized memory is one of the common problems faced when copying data across trust boundaries. This can happen between the hypervisor and guest OS, kernel and user space, or across the network. The most common bug pattern noticed among…

Let’s tackle the most valuable and mysterious bug type…

Providing security research and red team techniques

PoC_CVEs. Contribute to tg12/PoC_CVEs development by creating an account on GitHub.

rconn is a multiplatform program for creating generic reverse connections. Lets you consume services that are behind firewall or NAT without opening ports or port-forwarding. - GitHub - jafarlihi/r...

Adam Langley (Google) comes on the podcast to talk about the evolution of WebAuthN and Passkeys!David's audio was a little finicky in this one. Believe us, it sounded worse before we edited it. Also, we occasionally accidentally refer to U2F as UTF. That's…

An experimental webkit-based kernel exploit (Arb. R/W) for the PS5 on <= 4.51FW - GitHub - Cryptogenic/PS5-IPV6-Kernel-Exploit: An experimental webkit-based kernel exploit (Arb. R/W) for the...

A free cyber risk scoring tool for vulnerabilities

spk aka spritzgebaeck: A small OSINT/Recon tool to find CIDRs that belong to a specific organization. - GitHub - dhn/spk: spk aka spritzgebaeck: A small OSINT/Recon tool to find CIDRs that belong t...

Scoreboard hacking. Creating our own wireless controller with GNU radio and Python.

By Suha Hussain tl;dr: Our publicly available Semgrep ruleset now has 11 rules dedicated to the misuse of machine learning libraries. Try it out now! Picture this: You’ve spent months curating imag…

Modern cloud native SIEM

pîrebok (from Kurdish "witch") - a guided adversarial fuzzer - GitHub - dogancanbakir/pirebok: pîrebok (from Kurdish "witch") - a guided adversarial fuzzer

Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fo...

What is your worst supply chain nightmare and why is it somebody that could take over all the PHP packages at once? Let's deep dive into how we could demonstrate it!