Since I’ve been asked if this is possible - well…you can do Dll Injection using C# but the injected Dll must be written in a language that doesn’t depend on a CLR (C/C++ would be a good option here, but...

A blog from the world class Intelligence Group, Talos, Cisco's Intelligence Group

MITRE ATT&CK Matrix flattened and mapped by category to threat actor groups and software examples of each attack.

WIP

Linux
Windows
CmdStager
ARCH_CMD
check

I’ve recently noticed a spike in questions from our customers -- and specifically security analysts -- about App Transport Security (ATS), or

In one of our previous posts, we noted that a popular tool – Responder – uses Basic Authentication prompts to harvest user credentials when they accidentally enter invalid domains in we…

August is always full of security awareness in the wake of DefCon, BlackHat USA and t...

CloudFlare can be subverted, exposing the real IP addresses of cloud targets. You can use CFire to identify misconfigurations in your cloud architecture.

A blog from the world class Intelligence Group, Talos, Cisco's Intelligence Group

From a security analytics and Threat Intelligence perspective pastebin is a treasure trove of information. All content that is uploaded to pastebin and not explicitly set to private (which requires an account) is listed and can be viewed by anyone. tl;dr…

This is the first part of a series of posts I am going to do about Windows kernel exploitation, via vulnerable drivers. The project I will be using for the exploit is HackSys Extreme Vulnerable Driver, which is a really cool little vulnerable windows driver…

This was a fun challenge, a lot of mistakes were made and a lot of things were learnt! Shout out to 0x4a47 my team mate for the RHME3 CTF aswell. As a good exploit challenge starts, we begin by running file on the binary to see what we learn about

A look at how expired domain names can be turned into a lucrative malicious traffic redirection tool.

Malware Analysis - VBA noscripts used to download TrickBot banking trojan

9 points and 0 comments so far on reddit