In this article I will introduce how to generate GDB Python code to trace a program being analyzed in Ghidra.

RomHack is a format made by the non-profit association Cyber Saiyan and composed by a Conference a Training session and a Hacker Camp.

NOTE: This article is based off the following and should be followed first:

CVE-2023-34992 Fortinet FortiSIEM Command Injection Deep-Dive and Indicators of Compromise. This blog details a command injection vulnerability which allows an unauthenticated attacker to access the FortiSIEM server as root to execute arbitrary commands.

A vulnerability in PDF.js found by Codean Labs. PDF.js is a JavaScript-based PDF viewer maintained by Mozilla. This bug allows an attacker to execute arbitrary JavaScript code as soon as a malicious PDF file is opened. This affects all Firefox users (

Team82 found multiple vulnerabilities in the EpicMo protocol implementation within Honeywell ControlEdge Virtual UOC instances. These vulnerabilities are exploitable and can lead to unauthenticated remote code execution.

CISA and the FBI have issued a warning.

Tenable Research has discovered a critical memory corruption vulnerability dubbed Linguistic Lumberjack in Fluent Bit, a core component in the monitoring infrastructure of many cloud services.

Information Security Services. Offensive Security, Penetration Testing, Mobile and Application, Purple Team, Red Team

CYFIRMA researchers have identified a new information-stealing malware named "SamsStealer" that targets Windows systems.

Information Security Services. Offensive Security, Penetration Testing, Mobile and Application, Purple Team, Red Team

MCP Made Easy and secure - Onboard AI tools in a click.

TL;DR: Basically, if a target website is protected by a WAF using the OWASP Core Rule Set or Comodo Rule Set or Atomicorp Rule Set, you can send the string ORA-1234 or OracleDrive or ASL-CONFIG-FILE in a comment, product review, registration form, e-commerce…

What are escape sequences

Contribute to cybersectroll/TrollUAC development by creating an account on GitHub.

An improvement and a different approach to Mockingjay Self-Injection. - thiagopeixoto/mystique-self-injection

In this article we will focus on exploiting vulnerabilities in the WiFi protocol (IEEE 802.XX) using Freeway.

Visualise Nmap Results with a detailed Dashboard built using the powerful Open Source Grafana Analytics Software.

Lately, I’ve been drawn to do some desk research and limited hands-on testing of physical security measures. I’ve written about this subject before, you can find the article here. Howev…