Denoscription of how to backdoor PAM and exfiltrate credentials via DNS requests. Capture credentials FTW!

With much attention lately over North Korea and its evolving cybersecurity capabilities, we thought to cover a somewhat related topic. A couple of years back...

In this note, I describe an interesting XSS that I found in February 2018 in one of the Google applications. I won't only show directly wher...

A web miner injected into compromised sites is just the tip of the iceberg for an infrastructure hosting malicious Windows and Linux coin miners.

Fourteen directors resigned from ZTE’s board as the Chinese telecom aims to get out from under U.S. penalties, but the changes may be less sweeping than they appear.

In late March 2018, I analyzed an interesting PDF sample found by ESET senior malware researcher Anton Cherpanov. The sample was initially reported to Microsoft as a potential exploit for an unknown Windows kernel vulnerability. During my investigation in…

I. MotivationII. Compiler-assisted Code Randomization (CCR) OverviewIII. Identifying Essential Information for RandomizationIV. Obtaining Metadata from the LLVM BackendV. Metadata Definition with G…

The top hacker tools and software gadgets for 2018...The keyllama hacking tool is the best undetectable softw..

It has been a quite while since I haven’t released a new part of unexpected journey article serie. Particularly this small 0-day research project has been certainly didactic to me. Thus, I’ve decided to write down the process of achieving remote code execution…

Introduction MaiInt is a tool to perform OSINT, gather employee names and predict e-mail addresses for China based companies. The output is in HTML and CSV format. The Challenge The primary issue we’re trying to solve is that there are no good tools to enumerate…

Fortnite is the most popular game right now; it’s a genuine cultural phenomenon that is sweeping the world. Sadly, where there is a popular channel there will always be malicious actors. Today we want to diverge from our usual tech and vision blogs and share…

1 votes and 0 so far on reddit

In the final installment of the Frida Engage blog series, we will demonstrate how to use Frida for hooking and inspecting Apple's NSXPC API using the CleanMyMac 3 application as our guinea pig.

Introduction The Aorus Gaming box is an external GPU (eGPU) that is light-weight and you can carry it around with you on different penetration tests. Let's take for example you might have a client who does not want you to take any data off-site (for obvious…

The Hackability inspector enables you to quick enumerate objects and discover interesting functions to exploit.

A collaborative, multi-platform, red teaming framework - GitHub - its-a-feature/Mythic: A collaborative, multi-platform, red teaming framework

1 votes and 0 so far on reddit

One day I was sitting, looking at my screen trying to solve a problem. I was stuck and I knew I was not the only one who had this problem. As a malware researcher what were my options to seek help? Twitter? I felt like it was too public, and