An improvement and a different approach to Mockingjay Self-Injection. - thiagopeixoto/mystique-self-injection

In this article we will focus on exploiting vulnerabilities in the WiFi protocol (IEEE 802.XX) using Freeway.

Visualise Nmap Results with a detailed Dashboard built using the powerful Open Source Grafana Analytics Software.

Lately, I’ve been drawn to do some desk research and limited hands-on testing of physical security measures. I’ve written about this subject before, you can find the article here. Howev…

Auth system with encryption and web dashboard in python - Fadi002/pyauth

Breadcrumbs are left throughout computer systems that hackers can use to track attribution or recover sensitive information. See possible gotchas in this post.

On 28 February 2024, RARLAB released an update for WinRAR, patching an ANSI escape sequence injection vulnerability that I had found in the…

🚀 A powerful multi-platform RF toolbox that deploys specialized radio tools in seconds on Linux, Windows, and macOS—supporting x86_64, ARM64 (Raspberry Pi, Apple Silicon), and RISC-V architectures ...

Boost Security Audit, sponsored by Amazon Web Services (AWS), facilitated by Open Source Technology Improvement Fund (OSTIF) and performed by Shielder.

Have you ever had issues with CSRF tokens during a web assessment? Or drop data from burp to commandline for parsing? This is the guide to leverage the power of the Reshaper plugin developed by @ddwightx

Explore Securonix's insights on CLOUD#REVERSER, using Google Drive and Dropbox in sophisticated malware attacks and data theft.

Like most people working in IT or information security or just in general with computers you’ll often receive questions on how to protect against phishing attacks, scams or similar attempts t…

Explore passive techniques for surviving remediation and achieving eternal persistence in an AD environment.

In this post, we analyze a cluster of malicious PyPI packages targeting specific MacOS machines.

Overview CVE-2023-39143 is a path traversal vulnerability found in Papercut MF/NG, a print management solution. This particular CVE only affects Windows installations prior to version 22.1.3. With...

The service principals in Microsoft's Entra ID can be a boon for business email compromise, but they’re also a key log source for detection.