4 votes and 1 so far on reddit

ESET researchers identified a malicious PDF sample that revealed that the sample exploited two unknown vulnerabilities, a remote-code execution vulnerability in Adobe Reader and a privilege escalation vulnerability in Microsoft Windows, that when combined…

BinExp - Linux Binary Exploitation

BinExp - Linux Binary Exploitation

Cisco released 16 security advisories yesterday, including alerts for three vulnerabilities rated "Critical" and which received a maximum of 10 out of 10 on the CVSSv3 severity score.

What a mouthful of a noscript. Wouldn’t you agree? In this walkthrough you’ll learn about securing your Serverless endpoints with JSON web…

Where would be the best place to post about a possible flaw in the security of Draytek Routers so fellow Redditors are aware ?

Major (probably not only) US cell carriers are selling access to the real-time phone location data. Because, you know the Electronic...

Fraudulent activity among Latin American cybercriminals, known as bineros, continues to plague online streaming services and retailers operating in the region.

This week's Tools, Tips and Tricks episode goes over a social engineering recon tool. Maltego CE, Community Edition, is the tool of choice for information gathering on websites, companies, people and more. The first step to a penetration test is recon, information…

Researchers have created a proof-of-concept attack that allows unauthenticated adversaries to extract user credentials from misconfigured reverse proxy servers in order to delete, manipulate or extrac

1 votes and 0 so far on reddit

THE apps on your phone are secretly working together to spy on your life in minute detail, researchers have warned. Experts from Virginia Tech University analysed more than 100,000 pieces of Androi…

1 votes and 0 so far on reddit

The 'Selfish Ledger' video was made in 2016 by Nick Foster, the head of design at Google's ambitious research-and-development division, X. Google said it was designed to be provocative and does not relate to any products in development.

TLDR; use Splunk as a central log database and analysis system for offensive infrastructure logs. In many engagements, you will want accurate logging across multiple RAT systems, phishing web servers, mail systems, and more. Currently only supports Cobalt…

This blogpost describes how I got annoyed by vulnerabilities in 3rd party Windows applications, which allowed to execute local files but wi...

President Trump’s assertion that his phones at Trump Tower were tapped in 2016 has been treated as hilarious in some circles. But I can vouch for the fact that extracurricular surveillance does occur.

Eclypsium researchers have discovered a new application of speculative execution attacks, bypassing hardware-based memory protections.