Twitter: @s4tan Sacara VM GitHub project: https://github.com/enkomio/sacara In this blog post I want to describe a bit my latest side pro...

Most advanced XSS detection suite. Contribute to s0md3v/XSStrike development by creating an account on GitHub.

Trojan.TrickBot has been present in the threat landscape from quite a while. We wrote about its first version in October 2016. From the beginning, it was a well organized modular malware, written by developers with mature skills. It is often called a banker…

ADB - Trinity in Words

The Android Debug Bridge (ADB) is a protocol designed to keep track of both emulated and real phones/TVs/DVRs connected to a given host. It implements various commands designed to assist the developer (adb shell, adb push, and so on)…

It was discovered that gettext incorrectly handled certain messages. An attacker could possibly use this issue to execute arbitrary code.

USN-3815-1 fixed a vulnerability in gettext. This update provides the corresponding update for Ubuntu 12.04 ESM.
Original advisory details:
It was discovered that gettext incorrectly handled certain messages. An attacker could possibly use this issue to execute…

BGP route leak interrupts access to Google’s services throughout the world. Traffic rerouted via Russia and China and slammed into the great firewall.

It's been a while since we last wrote about Layer 3/4 DDoS attacks on this blog. This is a good news - we've been quietly handling the daily onslaught of DDoS attacks. Since our last write-up, a handful of interesting L3/4 attacks have happened. Let's review…

FCL (Fileless Command Lines) - Known command lines of fileless malicious executions - chenerlich/FCL

In a previous blog we highlighted a vulnerability in Chrome that allowed bad actors to steal Facebook users’ personal information.

Squally is a 2D puzzle RPG game that teaches video game hacking -- WITHOUT boring lessons, lectures, nor the need for prior experience. Instead, Squally teaches hacking through fun engaging puzzles where learning is a by-product.

An Unexpected Consequence of a Bad Header

Open Bug Bounty should reconsider publicly listing the vulnrabilities they collect.

Hi again, Welcome my first bug bounty write up, I don't do bug bounty that much especially web bug bounties but it started to interest me lately so I decided to start looking for bugs in UBER. Disclaimer Before you start I highly recommend you read about…

Research by: Oded Vanun, Dikla Barda and Roman Zaikin DJI is the world’s leader in the civilian drone and aerial imaging technology industry. Besides from consumers, though, it has also taken a large share of the corporate market, with customers coming from…

ZIP File Raider - Burp Extension for ZIP File Payload Testing - destine21/ZIPFileRaider

Bypassing disabled exec functions in PHP via imap_open - Bo0oM/PHP_imap_open_exploit

Metadata reveals what might be contained in the data: the point of it is to make connections and provide context, show relationships and help understand them.

gOSINT is an open source intelligence gathering tool developed in Go programming language.