Ever felt that Android CTF challenges are too focused on reverse engineering, leaving out the thrill of real-world exploitation? I did too…

This setup serves as a convenient alternative to carrying a full-sized laptop or struggling with a smartphone’s virtual keyboard for complex technical tasks. It offers comfortable typing and an efficient portability.

Analysis of a suspicious binary found in MicroDicom Viewer installer - darnas11/MicroDicom-Incident-Report

This is the personal website of Egidio Romano, a very curious guy from Sicily, Italy. He's a computer security enthusiast, particularly addicted to webapp security.

It happened earlier this week during a visit intended to celebrate the sister city relationship between Canberra and Wellington.

Update 6/10: Based on a short conversation with an engineering lead at X, some of the devices used at X are claimed to be using HSMs. See more further below. Matthew Garrett has a nice post about T…

From rate limits to no limits: How IPv6's massive address space and a crafty botguard bypass left every Google user's phone number vulnerable

Summary The analysis conducted on the product: ISPConfig version: 3.2 build: 12p1 was carried out using the official installation package. The analysis identified primarily design flaws in the user creation/edit functionality, which allow a client user to…

CVE-2025-47934 allows attackers to spoof arbitrary signatures and encrypted emails that appear as valid in OpenPGP.js. The only requirement is access to a single valid signed message from the target author ("Alice"). Since this undermines the core principle…

Posted by New-Arrival414 - 3 votes and 0 comments

proofnet ist spezialisiert auf Security PenTests im Connected Car Umfeld.

New research reveals critical security flaws in Salesforce Industry Cloud. Discover the risks and how to protect your organization now.

Learn how to set up Kali Linux on Docker with a custom image and file sharing. Great for bug bounty beginners and ethical hackers.

As security teams scale and diversify, open-source tools remain essential — whether for detection, response, threat intel, or automation…

It is a sad truth in IT security that some vulnerabilities never quite want to die and time and time again, vulnerabilities that have long been fixed get revived and come right back at you. While researching relay attacks, the bane of Active …

Découvrez le rôle des comptes machines dans Active Directory en pentest et les attaques possibles (Shadow Credentials, RBCD, Silver Ticket).

An attacker is using ‘Google.com’ to deliver and execute their own code in a weaponized Google OAuth attack.

breakpoint of no return