POC for a DLL spoofer to determine DLL Hijacking. Contribute to MitchHS/DLL-Spoofer development by creating an account on GitHub.

An uber fast and simple subdomain enumeration tool using DNS and web requests with support for detecting wildcard DNS records. - GitHub - n0mi1k/subby: An uber fast and simple subdomain enumeration...

Since early October 2023, Microsoft has observed North Korean nation-state threat actors Diamond Sleet and Onyx Sleet exploiting the Jet Brains TeamCity CVE-2023-42793 remote-code execution vulnerability. Given supply chain attacks carried out by these threat…

In today’s dynamic technological landscape, the shift to cloud environments has become a cornerstone of business innovation. As companies…

15 votes, 11 comments. 492K subscribers in the netsec community. /r/netsec is a community-curated aggregator of technical information security…

Contribute to DeiteriyLab/protobuf-magic development by creating an account on GitHub.

Contribute to IoTSecurity101/IoT-Lab-Setup-Guide development by creating an account on GitHub.

Here at watchTowr, we just love attacking high-privilege devices (and spending hours thinking of awful noscripts [see above]).

A good example of these is the device class of ‘next generation’ firewalls, which usually include VPN termination functionality (meaning…

Technical deep-dive, indicators of compromise, and exploit POC for CVE-2023-34051 which affects VMware vRealize Log Insight RCE as reported in VMSA-2023-0021. This vulnerability leads to remote code execution and full system compromise.

VSS Hardware Hacking Wiki and Blog Entries

About The Project Modern Software Development environments have significant debugging capabilities to troubleshoot issues with the complex nature of modern software . These debugging capabilities typically manifest in Interactive Development Environment (IDE)…

Doing security research we are constantly setting up local installations of software we are testing, and running many noscripts and utilities. To avoid risking or polluting our computer with this, we do most things isolated in virtual machines or containers.…

Several months ago, the Constrast Security Team reported a Java deserialization vulnerability about Spring Kafka to VMWare Security Team. It immediately attracted my attention and I got started to ana

CVE-2013-4786 Go exploitation tool. Contribute to fin3ss3g0d/CosmicRakp development by creating an account on GitHub.

A recently disclosed CVE for the Orthanc DICOM server can be used to obtain Remote Code Execution. As a PoC was not available, we wrote one.