A hacker took control of Ticketfly's website and claims to have stolen the company's customer database.

Occasionally, one or several phases requiring physical access to a machine are included during Red Team exercises. This requires redesigning how to confront this type of particular scenarios. In this post, it is explained the physical intrusion process followed…

Schedule, talks and talk submissions for BSidesLisbon2018

hunting-ct-bigquery - Hunting Certificate Transparency log with BigQuery

In this blog, we will quickly go through what is the Certificate Transparency log and how we used BigQuery to search for bad domains trying to spoof a business’s domain (and how you can do it as well). Certificate Transparency … Read More

1. Advisory InformationTitle: Quest DR Series Disk Backup Multiple VulnerabilitiesAdvisory ID: CORE-2018-0002Advisory URL: http://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilitiesDate published: 2018-05-31Date of last update:…

1. Advisory InformationTitle: Quest KACE System Management Appliance Multiple VulnerabilitiesAdvisory ID: CORE-2018-0004Advisory URL: http://www.coresecurity.com/advisories/quest-kace-system-management-appliance-multiple-vulnerabilitiesDate published: 2018…

1. Advisory InformationTitle: Quest DR Series Disk Backup Multiple VulnerabilitiesAdvisory ID: CORE-2018-0002Advisory URL: http://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilitiesDate published: 2018-05-31Date of last update:…

Coalfire Labs blog posts with opinions, findings and research from the technical testing of IT perspective.

Open source security auditing tool to search and dump system configuration. It allows you to generate reports in HTML or RAW-HTML formats. - trimstray/otseca

An explanation of how debugfs and nf hooks can be used to remotely execute code.

In April 2018, while monitoring public data feeds, we noticed an interesting and previously unknown backdoor using HackingTeam’s leaked RCS source code. We discovered that this backdoor was developed by the Iron cybercrime group, the same group behind the…

Privacy protection is basically what we do, so I never get tired of stories about how unpredictable the ways of getting Facebook user data are. Cambridge Analytica might be dead, but the business of stealing users’ data lives on, and this article demonstrates…

PQCrypto-VPN - Post-quantum Cryptography VPN

Windows-API-Hashing - This is a simple example and explanation of obfuscating API resolution via hashing

chipsec - Platform Security Assessment Framework