In this post, I'll exploit CVE-2023-3420, a type confusion in Chrome that allows remote code execution (RCE) in the renderer sandbox of Chrome by a single visit to a malicious site.

NoSQL injection is a vulnerability where an attacker is able to interfere with the queries that an application makes to a NoSQL database. NoSQL injection ...

This blog will introduce you how it is possible to write a persistent reverse shell app on Android without any user requested and visible permissions. Since such application has no permissions, it shouldn’t be able to perform any task. Well, that isn’t true.…

On September 27, 2023, the U.S. National Security Agency (NSA), the U.S. Federal Bureau of Investigation (FBI), the U.S. Cybersecurity and Infrastructure Security Agency (CISA), the Japan National Police Agency (NPA), and the Japan National Center of Incident…

I have reviewed several solutions for our fix the flag contests, contributed by seasoned developers and prominent CTF players. What has been the most commonly adopted approach to address security vulnerabilities? The answer is Input Validation. This doesn’t…

r/offensive_security: Welcome to the Official Offensive Security now known as OffSec! Learn, share, and connect with others in preparation for OSCP …

The article presents how to store and analyse Software Bill of Materials with OWASP Dependency-Track to identify security vulnerabilities…

Introduction

I spent a recent flight finding out what I could do with an connection to the flight’s wifi, but without access to the internet.
I was on my way home from Strange Loop, on a flight from St. Louis to Oakland. It’s a long enough flight that I planned to purchase…

The 3AM ransomware group has recently been spotlighted for its cybercriminal activities. However, why it is the topic of the day is their choice of

Contribute to fireblocks/mpc-lib development by creating an account on GitHub.

ESET researchers uncover a Lazarus attack against an aerospace company in Spain, where the group deployed several tools, including a publicly undocumented backdoor we named LightlessCan.

The Marvin Attack is a return of a timing variant of a 25-year-old vulnerability that allows performing RSA decryption and signing operations with the private key of a TLS server.

This blog post will give a short overview of how in-memory .NET assembly execution commonly works and what detection mechanisms exist.