FairPlay comprises a set of algorithms created by Apple for digital rights management (also called DRM, digital rights management). FairPlay is currently used to manage the decryption of iOS applications during their installation on Apple devices. In fact…

Setting up the environment + Hello […]

Flash (almost) any vBIOS to (almost) any nVIDIA GPU - notfromstatefarm/nvflashk

This blog will provide you with information on the several techniques and tools used to attack Wi-Fi networks using NetHunter app. We'll talk about the various tools such as the wifite, shed light on the deauthentication attack technique, and explore the…

A conversational AI system that listens, learns, and challenges

Protected Process Dumper Tool. Contribute to tastypepperoni/PPLBlade development by creating an account on GitHub.

As a researcher I often run into situations in which I need to make a compiled binary do things that it wouldn’t normally do or change the way it works in some way. Of course, if one…

This blog is based on a session we presented at DEF CON 2023 on Friday, August 11, 2023, in Las Vegas: Contain Yourself: Staying Undetected Using the Windows Container Isolation Framework.

As the adoption of Multi-Factor Authentication increases throughout organizations, so does the desire to bypass these protections.

Action pinning doesn’t always offer security. Understand risks stemming from the GitHub Actions ecosystem and learn how to avoid compromise of CI/CD pipeline.

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Pers...

Build a CVE library with aggregated CISA, EPSS and CVSS data - r3volved/CVEAggregate

Various one-off pentesting projects written in Nim. Updates happen on a whim. - RePRGM/Nimperiments

This vulnerability allows a physically-present attacker to control the full disk encryption unlock process and gain complete access to decrypted content in some cases where a TPM, dracut and Clevis are used.

Easy to understand NetNTLMv1 downgrade, relaying stuff and further resources for those who want to get the bigger picture at the end of this post.

This class teaches you how to use HyperDbg, a virtualization-based debugger.

Doyensec's Blog :: Doyensec is an independent security research and development company focused on vulnerability discovery and remediation.

Leverage eBPF to secure internet-facing APIs: FastAPI, BlackSheep, Flask, Django, aiohttp, tornado, and more.