Our publications of the Swiss E-Voting Public Intrusion Test (PIT) - setuid0-sec/Swiss_E-Voting_Publications

Exploitation and mitigation bypasses for the new Drupal 8 RCE (SA-CORE-2019-003, CVE-2019-6340), targeting the REST module.

0 votes and 0 comments so far on Reddit

Quick Sumarry Hey guys today Zipper retired and here’s my write-up. Owning user on this box was challenging because we have to exploit an RCE vulnerability which is not really easy and then we have to get a stable shell to be able to enumerate, for the privilege…

A Hacker's Blog of Unintended Use and Insomnia.

New tools, old methods. Down the RE’ing rabbit hole to exploit a fatal flaw in an otherwise great password manager (1Password 4).

The HHS’ Office for Civil Rights has announced its third HIPAA financial penalty of 2018 - The 4th largest HIPAA penalty ever issued.

A new technique is being used by scammers to hide their phishing websites. This novel phishing attack uses a custom web font to render ciphertext as plaintext. The tactic is being used in phishing scams impersonating major U.S. banks.

A Reddit user has discovered a method to bypass recently introduced Face ID and Touch ID authentication for WhatsApp iOS version

Hi Guys, This is yet another a security vulnerability writeup about a chain of security vulnerabilities that linked up to compromise one…

A group of academics have found three new security flaws in 4G and 5G, which they say can be used to intercept phone calls and track the locations of cell phone users. The findings are said to be the first time vulnerabilities have affected both 4G and the…

The deep thinkers approach to OSINT. What if all you had was a search engine? A complete and total focus on observable evidence linked by inferences.

Zone transfers for rwhois. Contribute to ShadowHatesYou/whori.sh development by creating an account on GitHub.

0 votes and 0 comments so far on Reddit

Robust and practical application control for Windows - GitHub - microsoft/AaronLocker: Robust and practical application control for Windows

To provide users and IT teams with actionable intelligence about Chrome extensions, Duo Labs is excited to announce the public beta of CRXcavator (rhymes with “excavator”), a free service that analyzes Chrome extensions and produces comprehensive security…

Learn everything there is to know about building and maintaining your own home or workplace virtual lab environment on the most popular hypervisors today!

JonLuca’s Blog - A blog about tech, programming, and information

0 votes and 0 comments so far on Reddit