The first official EMBArk release is out now!




Everything started as an idea in the beginning of 2021. The idea was to build an enterprise ready open source firmware analysis environment on top ...

Rhino Security Labs identified 8 new CVEs in the Silverpeas Core application.

CVE-2023-22518 is a zero-day vulnerability found in Confluence Data Center, a self-managed solution known for providing organizations with best practices for collaboration. This vulnerability was...

iPhone: millions of users are threatened by a huge flaw January 17, 2022 by CA18 iPhones are not completely immune to malware and security vulnerabilities. The only advantage iPhone users have over competing Android smartphones is that Apple knows its devices…

Overview Credential harvesting, also known as credential theft or credential stealing, refers to the collection sensitive authentication information from individuals or systems. The goal of credent…

Rhysida Ransomware analysis - A painful sting to Insomniac Games Hack

Our Clean Code solution SonarCloud discovered multiple vulnerabilities leading to remote code execution on pfSense CE 2.7.0. Let's see how SonarCloud found them and how it can keep your code clean.

Abuse the CLR memory (un)safety

This repo contains IOC, malware and malware analysis associated with Public cloud - unknownhad/CloudIntel

Extension for Visual Studio Code - View your nmap output inside VS Code, in a nice clean GUI

Posted by c0r0n3r - 6 votes and 2 comments

Understand how this small and home office router botnet can impact your business and how to combat the threat.

DLL Unlinking from InLoadOrderModuleList, InMemoryOrderModuleList, InInitializationOrderModuleList, and LdrpHashTable - frkngksl/UnlinkDLL

The BSAM methodology is a guide for security evaluation in devices with Bluetooth capabilities.

toolkit for python reverse engineering. Contribute to Fadi002/de4py development by creating an account on GitHub.

This is the personal website of Egidio Romano, a very curious guy from Sicily, Italy. He's a computer security enthusiast, particularly addicted to webapp security.

An analysis of CVE-2023–0872, CVE-2023–40315 & more