Building security is something most people consider at some point in their lives, whether they're looking at the property from a business perspective or just as the home they want to keep safe and secure. It's an important aspect of everyday life, and yet…

Probable-Wordlists - Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!

In the last post, Judas got SOCKS proxy and SSL support to make the proxy sneakier, but all the proxy can do is dump the requests and…

While some major distributed-denial-of-service attacks have been thwarted this month, the threat remains as critical as ever.

Just spoke to them on the phone and got the response "I haven't heard anything about that." Anyone here deal with Spectrum or another internet...

dprobe - Docker host and container auditor

HackVault - A container repository for my public web hacks!

The popular dating app Coffee Meets Bagel is leaking sensitive information about its 2 million users

The Memory Process File System for PCILeech is an easy and convenient way to quickly look into memory dumps. The processes in a memory dum...

  API(Application Program Interface) is a framework that makes it easy to build HTTP services that reach a broad range of clients, including browsers and mobile devices. Most of the websites p…

Probable-Wordlists - Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!

This post will outline a common flaw in implementations of Merkle Trees, with demonstrations of potential attacks against the most popular python libraries. But first, a brief overview of what both…

According to security researchers at Trustwave, businesses who have deployed IoT devices faced the security downsides, as IoT devices patching still lags. As a report

As Windows operating system continues leading IT industry, Windows threats remain increasing. So those who want to use the computer and browse the Internet with

The researchers at Kaspersky Lab ICS CERT decided to check the popular Hanwha SmartCams and discovered 13 vulnerabilities.

About two years ago I came across a .DS_Store file and wanted to extract its information (e.g. file names). After researching the file format and its security implications, as well as writing a parser for it, I would like to share my (limited) knowledge and…

JavaScript Zero: Real JavaScript and zero side-channel attacks Schwarz et al., NDSS’18 We’re moving from the server-side back to the client-side today, with a very topical paper looking at defences…

Some readers may remember our Analysis of .git folders in the Alexa Top 1M. WIth our tools we were able to discover and retrieve (hidden) directories and files (even without directory listing). We …

During the development of our new security SaaS, allowing anyone to check the security level of its own servers, we ran tests on one of our own websites. Since the website is hosted by one of the biggest hosting provider in Switzerland, we didn’t expect to…

We tested 3 popular VPNs: Hotspot Shield, PureVPN, and Zenmate with accredited researchers to find if the VPNs could leak data. While we hoped to find zero leaks, we regretfully found that all of them leak sensitive data. On the positive side, after we contacted…