Talos IR has responded to several recent incidents in which threat actors used legitimate digital document publishing sites such as Publuu and Marq to host phishing documents as part of ongoing credential and session harvesting attacks.

One line command and control backdoors for APIs and web applications. - Geeoon/asploit

Generates the tree of the directory listing page. Contribute to riza/indextree development by creating an account on GitHub.

CVE-2023-48788 Fortinet FortiClient EMS SQL Injection Deep-Dive and Indicators of Compromise. This blog details the SQL injection which allows an unauthenticated attacker to access the FortiClient EMS server as SYSTEM to execute arbitrary commands.

Posted by netsec_burn - 15 votes and 0 comments

Tracking a Bad Actor Through the Maze of Obfuscated Malware Code

A new microarchitectural side-channel attack exploiting data memory-dependent prefetchers in Apple silicons.

Gaps in information security communities for product security engineers

This critical security issue allows third party user to record audio from Bluetooth speaker with built-in microphone in vicinity, even when it is already paired and connected with another device. This can result in eavesdropping on private conversations using…

Gourlex is a simple tool that can be used to extract URLs and paths from web pages. - trap-bytes/gourlex

TryHackMe is a free online platform for learning cyber security, using hands-on exercises and labs, all through your browser!

Basic noscript to generate reverse shell payloads, generally most used in ctf. - washingtonP1974/Rev-Shell

Honeypots is catfishing in the world of cybersecurity – no candlelit dinners, just firewalls and encrypted love letters to trap hackers!IntroductionIn the ever-evolving landscape of cybersecurity, staying one step ahead of malicious actors is not just a challenge…

Leverages B64 chunks to split files and save to clipboard - ZephrFish/ChunkyIngress

As I was doing a little seasonal cleaning recently I worked my way through all my tech gear and took stock of everything associated with my…

A MBR Fuzzer. Contribute to nstarke/bootfuzz development by creating an account on GitHub.

Learn about the vulnerabilities affecting Cisco's WAP371 and other Small Business Wireless APs, and the importance of binary static analysis.

This class teaches RISC-V assembly language. It requires you know C programming.

Our work shows that it is possible to trigger Rowhammer bit flips on DDR4 devices on AMD Zen 2 and Zen 3 systems despite deployed TRR mitigations. This result proves that AMD systems are equally vulnerable to Rowhammer as Intel systems, which greatly increases…