Hamburglar -- collect useful information from urls, directories, and files - needmorecowbell/Hamburglar

☠️ Delightful Node.js packages useful for penetration testing, exploiting, reverse engineer, cryptography ... - jesusprubio/awesome-nodejs-pentest

The practice of HTTPS interception continues to be commonplace on the Internet. This blog post discusses types of monster-in-the-middle devices and software, and how to detect them.

An example of how to write a custom encoder and decoder in plain assembly.

0 votes and 0 comments so far on Reddit

Contribute to pownjs/pown-whoarethey development by creating an account on GitHub.

In this article, we will learn to exploit Windows, Linux and Android with pupy command and control tool. Table of Content : Introduction Installation Windows Exploitation Windows Post Exploitation Linux Exploitation Linux Post Exploitation Android Exploitation…

First of all let's remember a standart group policy precedence: Local — Site — Domain — Organisation Unit (LSDOU). From less specific level to more specific. It...

So, I have a deep love when it comes down to Kibana personally. Since I started using it around 2 years ago since the start of my job I…

On January 23rd, we published a detailed report in collaboration with Malwarebytes concerning a prolific and persistent malvertiser that…

Nuki provides an electronic smart lock that integrates with existing keys and cylinders by simply being mount on top of them. It offers Bluetooth connectivity and can be accessed online with the help of a bridge device which connects to the local wireless…

Ransomware cracker Fabian Wosar lives in hiding because of the threats and abuse he receives from those whose code he cracks.

Over the last five years, there has been a massive increase related to security research into Window kernel exploitation and during this same time period, Microsoft have also mitigated multiple exploitation techniques. While a steady stream of kernel exploitation…

Talos intelligence and world-class threat research team better protects you and your organization against known and emerging cybersecurity threats.

Preamble I’ve been testing some Hak5 devices recently. I have to admit that they are all incredible, easy to use and well-designed. The Packet Squirrel is an incredible small MIPS device, bas…

A brand new technique for detecting the content-type and the HTTP status of the cross-origin response via object typemustmatch attribute.

Using HTTP pipelining to hide HTTP requests.

TitanHQ has announced its award-winning email security solution is now even better. Sandboxing and DMARC email authentication have now been added to better protect users from email threats.

:star: An anomaly-based intrusion detection system. - alexfrancow/A-Detector

The objective of this series of posts is to clarify how Kerberos works, more than just introduce the attacks. This due to the fact that in many occasions it is not clear why some techniques works or not. Having this knowledge allows to know when to use any…

A now-patched vulnerability in the web version of Google Photos allowed  malicious websites to expose where, when, and with whom your photos were taken. Background One trillion photos were taken in 2018. With image quality and file size increasing, it’s obvious…