A new attack exploits the novel Openfire vulnerability (CVE-2023-32315) to deploy Kinsing malware and crypto miners to gain full control over the server.

Generic DTLS wrapper for UDP sessions. Contribute to SenseUnit/dtlspipe development by creating an account on GitHub.

Google Cloud Functions are improperly configured, leading to access control vulnerabilities

FairPlay comprises a set of algorithms created by Apple for digital rights management (also called DRM, digital rights management). FairPlay is currently used to manage the decryption of iOS applications during their installation on Apple devices. In fact…

Setting up the environment + Hello […]

Flash (almost) any vBIOS to (almost) any nVIDIA GPU - notfromstatefarm/nvflashk

This blog will provide you with information on the several techniques and tools used to attack Wi-Fi networks using NetHunter app. We'll talk about the various tools such as the wifite, shed light on the deauthentication attack technique, and explore the…

A conversational AI system that listens, learns, and challenges

Protected Process Dumper Tool. Contribute to tastypepperoni/PPLBlade development by creating an account on GitHub.

As a researcher I often run into situations in which I need to make a compiled binary do things that it wouldn’t normally do or change the way it works in some way. Of course, if one…

This blog is based on a session we presented at DEF CON 2023 on Friday, August 11, 2023, in Las Vegas: Contain Yourself: Staying Undetected Using the Windows Container Isolation Framework.

As the adoption of Multi-Factor Authentication increases throughout organizations, so does the desire to bypass these protections.

Action pinning doesn’t always offer security. Understand risks stemming from the GitHub Actions ecosystem and learn how to avoid compromise of CI/CD pipeline.

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Pers...

Build a CVE library with aggregated CISA, EPSS and CVSS data - r3volved/CVEAggregate