LogSnare: A playground for testing, preventing, and logging IDOR vulnerabilities. - sea-erkin/log-snare

Click to read the article on phrack

Living off the False Positive!

Checks SSL/TLS certificates for potential malicious connections by detecting and blocking certificates used by botnet command and control (C&C) servers. - teler-sh/sebel

Contribute to SonfireOP68/SubSeekerPro development by creating an account on GitHub.

Yubikeys, FIDO2 and WSL Windows Subsystem for Linux (WSL), especially its second iteration (WSL2), offers a seamless way to run Linux distributions directly within Windows. This brings the familiar Linux environment and its powerful tools right to your fingertips…

Information Security Services. Offensive Security, Penetration Testing, Mobile and Application, Purple Team, Red Team

Phase 1: Using a pool of collectors to scan and connect to BTLE devices, shedding light on the intricacies of hardware, radio frequency challenges, and the importance of rate-limiting algorithms.

DUALITY: Advanced Red Team Persistence through Self-Reinfecting DLL Backdoors for Unyielding Control

Step-by-step instructions for extending nmap service detection capabilities

Dont Gamble with Risk. Contribute to bcdannyboy/DGWR development by creating an account on GitHub.

General information about BSides SATX 2023

HTTP 403 bypass tool. Contribute to trap-bytes/403jump development by creating an account on GitHub.

It is not uncommon developers or users responsible to write code (i.e. detection engineers using Sigma) to utilize Visual Studio Code as their code editor. The default capability of the product can…

Below is a recent Threat Brief that we shared with our customers. Each year, we produce over 20 detailed Threat Briefs, which follow a format similar to the below. Typically, these reports include …

Uncover the persistent threat of Account Takeover (ATO) and the emerging challenge of On-Device Fraud (ODF) in online banking. Learn how advanced Android banking trojans Copybara enable remote-controlled attacks and explore the tactics of threat actors, from…

Thoughts and experiments on software, security and better coding practises.

Exploit Observer aggregates & interprets exploit/vulnerability data from all over the Internet. Consequently, it has evolved into The World's Largest Exploit & Vulnerability Intelligence Database and is freely accessible to all.

Introduction to Smishing: Understanding SMS Phishing Tactics In the evolving landscape of cybersecurity threats, smishing—or SMS phishing—stands out as a formidable technique employed by adversaries to exploit human vulnerabilities. Smishing operates on a…