0 votes and 3 comments so far on Reddit

SummaryIn August 2018, Sam Thomas presented a new vulnerability of Wordpress at Black Hat USA 2018. The PHP object injection vulnerability is not new, but the way attacker can trigger this error is worth mentioning. In this article, I will go over the detail…

Research by: Elena Root and Andrey Polkovnichenko   Check Point researchers from the Mobile Threat Team have discovered a new adware campaign on the Google Play Store. This particular strain of Adware was found in 206 applications, and the combined download…

Privilege Escilation training project, with an emphasis on the distinction between vulnerability research & it's exposure and exploitation methods(which are CVE-independent.) - scalys7/Priv...

Pypykatz agent implemented in .NET. Contribute to skelsec/pypykatz_agent_dn development by creating an account on GitHub.

Pypykatz server. Contribute to skelsec/pypykatz_server development by creating an account on GitHub.

0 votes and 0 comments so far on Reddit

Pypykatz server. Contribute to skelsec/pypykatz_server development by creating an account on GitHub.

Email-Enum searches mainstream websites and tells you if an email is registered! - Frint0/email-enum

A simple, accessible recommendation for key sizes and recommended algorithms for various cryptographic algorithms.

Led by Noam Rotem, a well-known white hat hacker and activist, VPNMentor’s research team discovered a major security breach in Gearbest.  With hundreds ...

0 votes and 0 comments so far on Reddit

Short note on a clever hack that makes everyones DNS just a bit more secure.

Four years later, the 2012 LinkedIn breach just got way worse.

In a recent post I was talking about a shellcode technique to bypass firewalls based on the socket's lifetime which could be useful for ve...

## Introduction

In Steam and other valve games (CSGO, Half-Life, TF2) there is a functionality to find game servers called the server browser. In order to retrieve the information about these...

Quick Summary Hey guys today Carrier retired and here is my write-up about it. User on this box wasn’t hard to get , but for root it’s a different thing because we will go through some networking tricks and we will perform an attack called bgp hijacking.…

A web application to transfer PowerShell modules, executables, snippets and files - AdrianVollmer/PowerHub

3 msfvenom payloads under the microscope