Not long ago security researchers found they could take over old tweets that linked to links that don’t work anymore. Did you know you can do the same thing with email? To demonstrate this, we “Email Graffitied” an email sent to all YouTube users in 2020.…

Welcome back to my blog. In this post, I’ll explain the REcollapse technique. I’ve been researching it for the last couple of years to discover weirdly simpl...

Provide powerful tools for seccomp analysis. Contribute to david942j/seccomp-tools development by creating an account on GitHub.

Hi, Last year (I know, I’m […]

Phylum disrupts software supply chain attacker attempting to construct an army of infected developer machines.

The first dynamic analysis framework for CPU microcode - x86 PAC · pietroborrello/CustomProcessingUnit@936a684

A threat actor is a term used to describe individuals whose purpose is to engage in cyber-related offenses. Learn the definition, types, motivations, and more.

In this post, we analyze a malicious PyPI package attempting to backdoor FastAPI applications.

All the deals for InfoSec related software/tools this Black Friday - GitHub - 0x90n/InfoSec-Black-Friday: All the deals for InfoSec related software/tools this Black Friday

Software signing just got easier. Sigstore The Easy Way guide is the most straightforward way to geting started with software signing & securing software supply chains.

TL;DR If you can find an unrestricted CORS endpoint, that also responds to the HTTP override headers, then potentially you can use it to access endpoints that aren’t enabled for CORS, bypass CSRF protections, and also deliver an XST (which will give you access…

I've been doing bug bounties for over 10 years now and over time, I have grown fonder of the life changing effects it has had for me. From job prospects, to being able to financially support those around me and myself. I believe that if you're passionate…

The simple way to detect heap memory pitfalls in C++ and C. Beta. - GitHub - CoolerVoid/heap_detective: The simple way to detect heap memory pitfalls in C++ and C. Beta.

A PoC ransomware sample to test out your ransomware response strategy. - hazcod/ransomwhere

The firmware of microcontrollers usually contains valuable data such as intellectual property and, in some cases, even cryptographic material.
In order to protect the confidentiality of these assets,

a smart DNS response-guided subdomain fuzzer. Contribute to elceef/subzuf development by creating an account on GitHub.

TLDR; a custom font can be used to avoid a plagiarism checker while still being human readable.