Over the years that I’ve been teaching Ghidra at Black Hat and other events, there is one question which inevitably comes up.

Trap beats, open loops and Dirty Daves spell trouble for our forensicators.

While working on a target, some of the most interesting parts to test is its API. APIs are dynamics, they get updated more often then…

The Mockingjay process injection technique was designed to prevent the allocation of a buffer with RWX permission, typically used for…

The Lazarus Group, a hacking organization backed by North Korea, has laundered over $200M in crypto through 25+ hacks from 2020 to 2023

Microsoft Developer Blogs Search Tool. Contribute to ElliotKillick/ms-devblogs-search development by creating an account on GitHub.

FlowMate, a BurpSuite extension that brings taint analysis to web applications, by tracking all parameters send to a target application and matches their occurrences in the responses. - usdAG/FlowMate

I recently worked on a Flutter-based application and learned that it is different from other hybrid frameworks like React Native or…

Analyze pcaps with Zeek and a Grafana Dashboard. Contribute to hackertarget/pcap-did-what development by creating an account on GitHub.

Explore a website's internal links, then visualize those connections as a network graph with scorecards and analysis using Claude AI. - devbret/website-internal-links

This post describes a case study of a recent LLM pentest engagement that allowed to exploit the LLM agent for remote code execution.

Contribute to ivision-research/burpnoscript development by creating an account on GitHub.

boostsecurityio/poutine. Contribute to boostsecurityio/poutine development by creating an account on GitHub.

Coordinated disclosure writeup about multiple vulnerabilities in RIOT OS (CVE-2024-31225, CVE-2024-32017, CVE-2024-32018, and more).

We discovered a fundamental design problem in VPNs and we're calling it TunnelVision. This problem lets someone see what you're doing online, even if you think you're safely using a VPN.

This blog post is a part of a series about our research toward the next generation of the SecureDrop whistleblowing …

An app for scaring away malware

Demo of our DIY USB Dead Man Switch (prototype) with a 3D-Printable Case triggering a lockscreen when the kill-cord's connection is severed.