Following research conducted by a colleague of mine [1] at CyberArk Labs, I better understood NVMe-oF/TCP. This kernel subsystem exposes INET socket(s), which can be a fruitful attack surface for...

Attackers are using Docker Hub for malicious campaigns of various types, including spreading malware, phishing and scams. Read the analysis of 3 malware campaigns.

Over the years that I’ve been teaching Ghidra at Black Hat and other events, there is one question which inevitably comes up.

Trap beats, open loops and Dirty Daves spell trouble for our forensicators.

While working on a target, some of the most interesting parts to test is its API. APIs are dynamics, they get updated more often then…

The Mockingjay process injection technique was designed to prevent the allocation of a buffer with RWX permission, typically used for…

The Lazarus Group, a hacking organization backed by North Korea, has laundered over $200M in crypto through 25+ hacks from 2020 to 2023

Microsoft Developer Blogs Search Tool. Contribute to ElliotKillick/ms-devblogs-search development by creating an account on GitHub.

FlowMate, a BurpSuite extension that brings taint analysis to web applications, by tracking all parameters send to a target application and matches their occurrences in the responses. - usdAG/FlowMate

I recently worked on a Flutter-based application and learned that it is different from other hybrid frameworks like React Native or…

Analyze pcaps with Zeek and a Grafana Dashboard. Contribute to hackertarget/pcap-did-what development by creating an account on GitHub.

Explore a website's internal links, then visualize those connections as a network graph with scorecards and analysis using Claude AI. - devbret/website-internal-links

This post describes a case study of a recent LLM pentest engagement that allowed to exploit the LLM agent for remote code execution.

Contribute to ivision-research/burpnoscript development by creating an account on GitHub.

boostsecurityio/poutine. Contribute to boostsecurityio/poutine development by creating an account on GitHub.

Coordinated disclosure writeup about multiple vulnerabilities in RIOT OS (CVE-2024-31225, CVE-2024-32017, CVE-2024-32018, and more).

We discovered a fundamental design problem in VPNs and we're calling it TunnelVision. This problem lets someone see what you're doing online, even if you think you're safely using a VPN.