GraphQL vulnerabilities generally arise due to implementation and design flaws. For example, the introspection feature may be left active, enabling ...

Bringing NFC contactless payment capability to a true classic.

Back in December 2022, Blasty published his research noscriptd ‘Dumping the Amlogic A113X Bootrom‘. Feeling inspired, and having a keen interest in embedded device security testing, secure boot and Trustzone research, I thought it might be fun to follow along…

Native Syscalls Shellcode Injector. Contribute to florylsk/RecycledInjector development by creating an account on GitHub.

Because we can!

Superpacking is a method of optimal binary compression developed by Meta to help reduce the size of their Android APKs. This compression for APKs makes sense for reducing network traffic required for distribution, but becomes an issue when trying to recover…

Find DLLs with RWX section. Contribute to oldboy21/JayFinder development by creating an account on GitHub.

Contribute to metlo-labs/csp-report-listener development by creating an account on GitHub.

Send phishing messages and attachments to Microsoft Teams users - Octoberfest7/TeamsPhisher

Attack Surface Management (ASM) is the proactive practice of identifying and managing the potential attack surface of an organization's IT assets to prevent and mitigate potential attacks by hackers. It is essential to minimize the exposure of valuable assets…

ServiceNow Insecure Access Control leading to Administrator Account Takeover - CVE-2022-43684

We discovered a vulnerability in the Bitwarden desktop app that exposed master passwords in the memory after a vault had been locked.

Our team of security experts will provide an exclusive glimpse into the phishing emails used in Facebook Phishing Campaign.

The infamous Clop ransomware, mainly known as Cl0p, targets various industries and organizations, extorting data for a huge amount of ransom. It advances actively with new emerging campaigns. This blog walks through the Clop timeline, Mitre TTPs and their…