Cold River is a sophisticated threat actor making malicious use of DNS tunneling for command and control activities, compelling lure documents, and previously unknown implants. Read our detailed analysis.

Participating in hacking competitions – aka, Capture the Flag – improves security culture and the talent of the security team. Learn how to think like a hacker in order to defeat hackers.

Quick Summary Hey I’m back with another Hack The Box write-up , this time Oz has retired and it was rated as a hard box. I enjoyed this box , it was really fun. It had some docker tricks which were very cool , It’s a linux box and it’s ip is 10.10.10.96 so…

Enumeration TCP nmap -p- -T4 -n IPmasscan -p0-65535 IP -n –rate 1000 -oL masscannmap -sC -sV IP -oA nmapnetdiscover -r IPnmap –noscript smb-check-vulns.nse –noscript-args=unsafe=1 -p445 IP U…

0 votes and 8 comments so far on Reddit

Intro This is a second post relating relay attacks. Initially, I wrote a small introduction to “local” relay against NFC Payments using the RFIDIot library. In this post, we will use th…

The padlock does not mean that the website is safe to use

We detail three different ways we have seen DNS records be manipulated to enable victim compromises.

1 vote and 0 comments so far on Reddit

I‘m in your base attacking your badges.

Trying to make a living as a programmer participating in bug bounties is the same as convincing yourself that you’re good enough at Texas Hold ‘Em to quit your job. There’s data to back this up in …

Here, I’ll be talking about an interesting vulnerability that I have found in NASA Jira (An Atlassian task tracking systems/project management software etc.).

Since August 2018, Ryuk Ransomware has been used to target enterprise environments. Threat actors operating it have netted over $3,701,893.98 USD to date.

Microsoft has always been pretty terrible at documenting new and interesting features for their System Integrity Policy used to enable secur...

Introduction Hey again ,Today’s article is going to be short. So last time I solved stack3 , I’m back again and today I’m going to solve stack4 which is really interesting , it’s slightly different from stack3 but that difference is a new thing to see if…

Fortnite’s in-game currency “V-Bucks” is being exploited by Cyber Criminals to launder money through the online game to make a profit.

IntroductionThis year's SANS Holiday Hack Challenge came in the form of a security conference called KringleCon where I took on the role of an attendee. The challenge had several parts to it. Throughout the conference there were various terminals which had…

A checklist for staying safe on the internet