Update: The results are in! Check out the final top ten here or scroll down to view all nominations Over the last year, numerous security researchers have shared their discoveries with the community t

Presentation front page

How I pwned half of America’s fast food chains, simultaneously. Also checkout Eva’s blogpost of this event.
With an upbeat pling my console alerted me that my noscript had finished running, to be precise it was searching for exposed Firebase credentials on…

Explore how to detect and prevent log leaks in open-source projects such as Shopizer, Killbill, and Teammates, using a Piiano Flows scanner.

Overview CVE-2023-263060 was exploited in the wild in Adobe ColdFusion product, a commercial application server for rapid web application development. The vulnerability affects both the 2018 and...

How to detect Adversary-in-the-Middle attacks in Office365 logon pages using hidden canaries.

secator - the pentester's swiss knife. Contribute to freelabz/secator development by creating an account on GitHub.

Introduction

A conversational AI system that listens, learns, and challenges

I recently read the Unlimited Results: Breaking Firmware Encryption of ESP32-V3 paper. This paper is about breaking the firmware encryption feature of the ESP32 SoC using a Side-Channel attack. This was an interesting read, and soon, I wanted to try to reproduce…

“No one cares about the old […]

Writeup of a remote code execution in Factorio by supplying a modified save file. - Valentin-Metz/writeup_factorio

New vulnerabilities discovered in the Bosch Rexroth NXA015S-36V-B, a popular smart nutrunner used in automotive production lines, may halt production or compromise safety.

VulnCheck bypasses the Apache OFBiz Groovy sandbox to land a memory resident reverse shell.

Security tends to lag behind adoption, and AI/ML is no exception.  Four months ago, Adnan Khan and I exploited a critical CI/CD vulnerability in PyTorch, one of the world’s leading ML platform…

It’s been a while since I wrote an “attack of the week” post, and the fault for this is entirely mine. I’ve been much too busy writing boring posts about Schnorr signatures!…