Breadcrumbs are left throughout computer systems that hackers can use to track attribution or recover sensitive information. See possible gotchas in this post.

On 28 February 2024, RARLAB released an update for WinRAR, patching an ANSI escape sequence injection vulnerability that I had found in the…

🚀 A powerful multi-platform RF toolbox that deploys specialized radio tools in seconds on Linux, Windows, and macOS—supporting x86_64, ARM64 (Raspberry Pi, Apple Silicon), and RISC-V architectures ...

Boost Security Audit, sponsored by Amazon Web Services (AWS), facilitated by Open Source Technology Improvement Fund (OSTIF) and performed by Shielder.

Have you ever had issues with CSRF tokens during a web assessment? Or drop data from burp to commandline for parsing? This is the guide to leverage the power of the Reshaper plugin developed by @ddwightx

Explore Securonix's insights on CLOUD#REVERSER, using Google Drive and Dropbox in sophisticated malware attacks and data theft.

Like most people working in IT or information security or just in general with computers you’ll often receive questions on how to protect against phishing attacks, scams or similar attempts t…

Explore passive techniques for surviving remediation and achieving eternal persistence in an AD environment.

In this post, we analyze a cluster of malicious PyPI packages targeting specific MacOS machines.

Overview CVE-2023-39143 is a path traversal vulnerability found in Papercut MF/NG, a print management solution. This particular CVE only affects Windows installations prior to version 22.1.3. With...

The service principals in Microsoft's Entra ID can be a boon for business email compromise, but they’re also a key log source for detection.

A few months ago, I stumbled upon a 24 years old buffer overflow in the glibc, the base library for linux programs. Despite being reachable in multiple well-known libraries or executables, it proved rarely exploitable — while it didn't provide much leeway…

Extension for Visual Studio Code - Add beautiful diagrams drawn on draw.io to your code
Diagram to Text

A beginner-friendly journey from a memory corruption to a browser pwn.

NOTE: This article is based off the following:

Follow along a journey to find vulnerabilities in the RPC functionaliy of ManageEngine ADAudit

Coordinated disclosure writeup about multiple vulnerabilities in Eclipse ThreadX (CVE-2024-2214, CVE-2024-2212, CVE-2024-2452).