Recent iPhone models have additional hardware-based security protection for sensitive regions of the kernel memory. We discovered that to bypass this hardware-based security protection, the attackers used another hardware feature of Apple-designed SoCs.

Parsing MSDN to discover potentially abusable APIs

A fast and comprehensive tool for organizational network scanning - pptx704/domainim

Posted by rythmiclizard - No votes and 6 comments

In 2014 Google researchers discovered strange interference between memory locations in DDR3, DDR4, and DDR5 Random Access Memory (RAM.) On…

Learn Basic Concepts of Linux. Best site to learn Linux from beginner to Advanced.

Lumma Infostealer’s cookie restoration method operates by leveraging a key from restore files, allowing the revival of expired Google cookies

514K subscribers in the netsec community. /r/netsec is a community-curated aggregator of technical information security content. Our mission is to…

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automa...

This tool allows you to perform OSINT and reconnaissance on an organisation or an individual. It allows one to search 1.4 Billion clear text credentials which was dumped as part of...

Hey there, fellow leet geeks!

I hope you're all having a fantastic day on this last day of the year and are ready to dive into the fascinating world of red teamers and one of their their secret...

Open source software, with its transparency and collaborative nature, has revolutionized the way we approach cybersecurity. It has become an invaluable tool in the arsenal of every ethical hacker...

RedLine Stealer is a dangerous type of malware that can cause serious harm to both individuals and organizations.

Our investigation has revealed an innovative approach that leverages executables commonly found in the trusted WinSxS folder and exploits them via the classic DLL Search Order Hijacking technique. This method allows threat actors to circumvent high privilege…

508K subscribers in the netsec community. /r/netsec is a community-curated aggregator of technical information security content. Our mission is to…

Microsoft search protocol enables clients to initiate connections against an enterprise search service such as SharePoint or WebDav. During these search connections the protocol server will respond…

BPF Memory Forensics with Volatility 3 Introduction and Motivation Have you ever wondered how an eBPF rootkit looks like? Well, here’s one, have a good look:
Upon receiving a command and control (C2) request, this specimen can execute arbitrary commands on…

Showcasing why automated scanners might miss some very obvious bugs and how to deal with that.

The HAFNIUM threat actor is using an unconventional method to tamper scheduled tasks in order to establish persistence via modification of registry keys in their malware called Tarrask. The benefit…

Sometimes, making particular security design decisions can have unexpected consequences. For security-critical software, such as password managers, this can easily lead to catastrophic failure: In this blog post, we show how Bitwarden’s Windows Hello …