Millions of GitHub repositories are potentially vulnerable to RepoJacking, which if exploited may lead to code execution on environments

How to prepare for AWS Certified Database Specialty

Callisto - An Intelligent Binary Vulnerability Analysis Tool - JetP1ane/Callisto

While doing research on Microsoft SQL (MSSQL) Server, GoSecure ethical hackers found an unorthodox design choice that ultimately led to a WAF bypass.

This is a summary of a Server Side Template Injection vulnerability found and used as RCE.

Fileless Command Execution for Lateral Movement in Nim - frkngksl/NimExec

Jormungandr is a kernel implementation of a COFF loader, allowing kernel developers to load and execute their COFFs in the kernel. - GitHub - Idov31/Jormungandr: Jormungandr is a kernel implementa...

A brand-new Burp Suite extension for discovering DNS vulnerabilities in web applications.

Get cybersecurity training from frontline experts with hands-on learning methods for on-the-job application: private, public, and on-demand courses.

We always assume prepared statements and ORMs are enough to protect us from SQL injection, but be careful not to misuse their APIs! Let's look into a real-world case and see what we can learn from it.

Our research team is committed to continuously identifying potential security vulnerabilities and techniques that threat actors may exploit to bypass existing security controls. In this blog post, our team is detailing on a comprehensive research specifically…

A BurpSuite extension to create a custom word-list of endpoint and parameters for enumeration and fuzzing - Anof-cyber/ParaForge

Executive summary Introduction In early 2023, CPIRT investigated an incident at a European hospital. The investigation showed that the malicious activity observed was likely not targeted but was simply collateral damage from Camaro Dragon’s self-propagating…

With the rise of internet and increasing risks of getting hacked, it's more than necessary nowadays that we have an extra layer of security on our accounts, since password alone is not enough. Thus, using Phone numbers for 2FA sounds much more secure, but…

Legitify GitHub Action

Overview During a recent adversary simulation, the MDSec ActiveBreach red team were performing a ransomware scenario, with a key objective set on compromising the organisation’s backup infrastructure. As part of...

Cylect.io is the Ultimate AI OSINT Framework. Threat Hunting specific information faster with Cylect.io, the ultimate AI OSINT search engine available.