We’ve heard that the coinhive site will be closed and we analyzed 3.1 billion web sites and found sites that host CoinHive malware. We focused on javanoscript files that contain ‘coinhive’ in HTML headers. These websites were cached by some sources in December…

The Cybereason research team observed a new campaign involving Ursnif in the beginning of 2019 attacking users in Japan across multiple customer environments. This Ursnif variant has enhanced stealing modules focused on taking data from mail clients and email…

0 votes and 1 comment so far on Reddit

This article will briefly explain methods behind the mobile malware unpacking. It will be focusing on Anubis since it is the latest trending malware for almost a year now. Actors use dropper applications as their primary method of distribution. Droppers find…

0 votes and 0 comments so far on Reddit

Achieving full R\W primitive with CVE-2019-0539

0 votes and 1 comment so far on Reddit

#FSoS (False Sens of Security). L'exemple du déverrouillage d’un Galaxy S10 au moyen d’une simple photo de son détenteur est utile pour démontrer que la "sécurité", dans les faits, c'est la prise en compte de tout un ensemble de nuances.

Zimbra is well known for its signature email product, Zimbra Collaboration Suite. Putting client-side vulnerabilities aside, Zimbra seems to...

TL;DR In this post, we explore the adoption of Linux hardening schemes across five popular distributions by examining their out-of-the-box properties. For each distribution, we analyzed its default kernel configuration, … Read of "Millions of Binaries Later:…

Docker container for creating the phishing sites using Blackeye - vishnudxb/docker-blackeye

0 votes and 1 comment so far on Reddit

0 votes and 3 comments so far on Reddit

SummaryIn August 2018, Sam Thomas presented a new vulnerability of Wordpress at Black Hat USA 2018. The PHP object injection vulnerability is not new, but the way attacker can trigger this error is worth mentioning. In this article, I will go over the detail…

Research by: Elena Root and Andrey Polkovnichenko   Check Point researchers from the Mobile Threat Team have discovered a new adware campaign on the Google Play Store. This particular strain of Adware was found in 206 applications, and the combined download…

Privilege Escilation training project, with an emphasis on the distinction between vulnerability research & it's exposure and exploitation methods(which are CVE-independent.) - scalys7/Priv...

Pypykatz agent implemented in .NET. Contribute to skelsec/pypykatz_agent_dn development by creating an account on GitHub.

Pypykatz server. Contribute to skelsec/pypykatz_server development by creating an account on GitHub.

0 votes and 0 comments so far on Reddit

Pypykatz server. Contribute to skelsec/pypykatz_server development by creating an account on GitHub.