Malware Analysis - ElmersGlue ransomware

I were going to write an introduction about how important negative results can be. I didn’t. I assume you can figure out for yourself why that is and if not you got all the more reason to read this…

Home of Nikhil SamratAshok Mittal. Posts about Pen Testing.

This is the first post in a series highlighting bits from our recent BlackHat USA 2017 talk. An index of all the posts in the series is  h...

2 points and 0 comments so far on reddit

Malware Analysis - AES Encrypted Phishing Site

Former NSA experts say it wasn’t a hack at all, but a leak—an inside job by someone with access to the DNC’s system.

TL;DR You could/can bypass Device Guard user mode code integrity with a custom CHM and execute code.   The last 6 months I have done some security research on my (little) spare time, because I…

Piper - Creates a local or remote port forwarding through named pipes.

Instacart is an American company that operates as a same-day grocery delivery service. Customers select groceries through a web application from various retailers and delivered by a personal shoppe…

In the last months there have been various groups of attackers as well as noscript kiddies that have been using the FuzzBunch Framework to co...

In the last months there have been various groups of attackers as well as noscript kiddies that have been using the FuzzBunch Framework to co...

We take a close look at alerting in Splunk, including sending nice Slack notifications.

dcrawl - Simple, but smart, multi-threaded web crawler for randomly gathering huge lists of unique domain names.

Have you ever been testing a web application for vulnerabilities, found a local file include (LFI) that could pay serious dividends if you had the right file on the web server, but couldn’t f…