In this blog, we will quickly go through what is the Certificate Transparency log and how we used BigQuery to search for bad domains trying to spoof a business’s domain (and how you can do it as well). Certificate Transparency … Read More

1. Advisory InformationTitle: Quest DR Series Disk Backup Multiple VulnerabilitiesAdvisory ID: CORE-2018-0002Advisory URL: http://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilitiesDate published: 2018-05-31Date of last update:…

1. Advisory InformationTitle: Quest KACE System Management Appliance Multiple VulnerabilitiesAdvisory ID: CORE-2018-0004Advisory URL: http://www.coresecurity.com/advisories/quest-kace-system-management-appliance-multiple-vulnerabilitiesDate published: 2018…

1. Advisory InformationTitle: Quest DR Series Disk Backup Multiple VulnerabilitiesAdvisory ID: CORE-2018-0002Advisory URL: http://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilitiesDate published: 2018-05-31Date of last update:…

Coalfire Labs blog posts with opinions, findings and research from the technical testing of IT perspective.

Open source security auditing tool to search and dump system configuration. It allows you to generate reports in HTML or RAW-HTML formats. - trimstray/otseca

An explanation of how debugfs and nf hooks can be used to remotely execute code.

In April 2018, while monitoring public data feeds, we noticed an interesting and previously unknown backdoor using HackingTeam’s leaked RCS source code. We discovered that this backdoor was developed by the Iron cybercrime group, the same group behind the…

Privacy protection is basically what we do, so I never get tired of stories about how unpredictable the ways of getting Facebook user data are. Cambridge Analytica might be dead, but the business of stealing users’ data lives on, and this article demonstrates…

PQCrypto-VPN - Post-quantum Cryptography VPN

Windows-API-Hashing - This is a simple example and explanation of obfuscating API resolution via hashing

chipsec - Platform Security Assessment Framework

I've always been a big fan of the old sockets reuse techniques : findtag , findport , etc.; each with its advantages and disadvantages. Thi...

Introduction Today I’m proud to announce a first-of-its-kind Wi-Fi security course – beta. Spanning 12 intensive weeks, this course goes well beyond what’s possible in traditional trainings and will transform you into a wireless security professional. Goal…

Watchdog - A Comprehensive Security Scanning and a Vulnerability Management Tool. - flipkart-incubator/watchdog