rconn is a multiplatform program for creating generic reverse connections. Lets you consume services that are behind firewall or NAT without opening ports or port-forwarding. - GitHub - jafarlihi/r...

Adam Langley (Google) comes on the podcast to talk about the evolution of WebAuthN and Passkeys!David's audio was a little finicky in this one. Believe us, it sounded worse before we edited it. Also, we occasionally accidentally refer to U2F as UTF. That's…

An experimental webkit-based kernel exploit (Arb. R/W) for the PS5 on <= 4.51FW - GitHub - Cryptogenic/PS5-IPV6-Kernel-Exploit: An experimental webkit-based kernel exploit (Arb. R/W) for the...

A free cyber risk scoring tool for vulnerabilities

spk aka spritzgebaeck: A small OSINT/Recon tool to find CIDRs that belong to a specific organization. - GitHub - dhn/spk: spk aka spritzgebaeck: A small OSINT/Recon tool to find CIDRs that belong t...

Scoreboard hacking. Creating our own wireless controller with GNU radio and Python.

By Suha Hussain tl;dr: Our publicly available Semgrep ruleset now has 11 rules dedicated to the misuse of machine learning libraries. Try it out now! Picture this: You’ve spent months curating imag…

Modern cloud native SIEM

pîrebok (from Kurdish "witch") - a guided adversarial fuzzer - GitHub - dogancanbakir/pirebok: pîrebok (from Kurdish "witch") - a guided adversarial fuzzer

Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fo...

What is your worst supply chain nightmare and why is it somebody that could take over all the PHP packages at once? Let's deep dive into how we could demonstrate it!

Automatically detect the URI scheme (http or https) if no scheme is provided
SQLite report format
Option to overwrite unwanted extensions with selected extensions
Option to view redirects history w...

The first of a two-part series. This part will cover how I set up a grammar fuzzer with LibAFL and Nautilus in order to fuzz the game server for Trackmania Nations Forever.

A novel backdoor for Microsoft SQL servers controlled using SQL queries

Every week, almost without fail, I come across one thing that confuses, entertains, or most commonly infuriates me. I’ve decided to keep a…

A Remote Code Execution vulnerability on Dompdf <= v2.0.0

By: Amy Robertson, Jared Ondricek, and Matt Malone