BPF is a popular and powerful technology embedded in the Linux kernel and can potentially be used by threat actors as part of their malicious arsenal.

Open-source tool to bypass windows and linux passwords from bootable usb - GitHub - Fadi002/unshackle: Open-source tool to bypass windows and linux passwords from bootable usb

"Infosec Twitter," a vibrant community of security practitioners, known for its insight, inspiration, and entertainment, is coming to an end.

Every week, almost without fail, I come across one thing that confuses, entertains, or most commonly infuriates me. I’ve decided to keep a…

Bypass client-side encryption using custom logic for manual and automation testing

Note: this is the "main" blogpost for the talk I am giving at BSides Basingstoke 2023. It spawned a dozen or so other blog posts, some of which have yet to be published. This post should auto publish at the time I am giving the talk, or just before, or

In part one of this series I described how to visualize Android application code using Dragon Dance + Frida + Lighthouse + Ghidra. Though there is one big hang-up, what if you don’t have root or want to examine a non-app process.

dnsReaper - subdomain takeover tool for attackers, bug bounty hunters and the blue team! - punk-security/dnsReaper

Accurately fingerprint and detect vulnerable (and patched!) versions of Netscaler / Citrix ADC to CVE-2023-3519 - GitHub - securekomodo/citrixInspector: Accurately fingerprint and detect vulnerable...

In June 2023, Phylum was the first to unearth a series of suspicious npm publications belonging to what appeared to be a highly targeted attack. The identified packages, published in pairs, required installation in a specific sequence, subsequently retrieving…

ERC-20 token standard contains a major logical flaw — lack of communication model (lack of transaction handling model).

This research details a new technique that can be used by threat actors for supply chain attacks on open-source repositories using GCP, Azure and AWS.

Technical

Python3 terminal application that contains 400 Neo4j cyphers for BloodHound data sets and 383 GUI cyphers - fin3ss3g0d/cypherhound

This article was not generated by GPT

Unexpected application states are often overlooked and can introduce severe security vulnerabilities. Read more about this real-world example.

Ido Veltzman speaking at BSidesTLV 2023: (Lady|)Lord Of The Ring

Persistence via Shell Extensions. Contribute to aahmad097/Test004 development by creating an account on GitHub.