This time I am writing about a dead simple and reliable sandbox exploit which only have one line of code. Yeah I am sure it’s an exploit…

allinfosecnews.com aggregates all of the top InfoSec news into one place.

Abusing SketchUp to make persistence on Windows. Contribute to mthbernardes/BadArchitect development by creating an account on GitHub.

0 votes and 1 comment so far on Reddit

Tl;dr: I’ve recently been playing around with Google services, poking here and there for security vulnerabilities. It’s been a quite a roller-coaster experience

Fuzzlon – Dumb 802.15.4 Fuzzer Enigmatos researches interesting attack-vectors that may hinder vehicles’ security and safety. Recently, as part of our ongoing research, we investigated a peculiar CAN-connected device which has an external radio interface…

Man-in-the-Middle with a Raspberry Pi

Working with containerized applications inherently brings on the question of how to best give these applications access to any sensitive information they may need. This sensitive information can often be in the form of secrets, passwords, or other credentials.…

Metasploit’s Development Diaries series sheds light on how Rapid7’s offensive research team analyzes vulnerabilities as potential candidates for inclusion in Metasploit Framework.

Minimal docker container of Parrot OS for running an automated pentest. - vishnudxb/automated-pentest

$50 Million CTF from Hackerone - Writeup. Contribute to manoelt/50M_CTF_Writeup development by creating an account on GitHub.

Dont rely on AntiVirus (AV) as your security conrnerstone. Bypassing AV (Windows Defender) is still as trivial as ever ... Part II.

Advanced information gathering and target recon tool for OSINT activities.

A walkthrough of exploiting NVIDIA GeForce Experience through arbitrary file overwrites, CVE-2019-5674.

To kick off this series on offensive security techniques, I am going to begin with what I consider to be the most important aspects of pentesting. Passi...

PoC to bypass Android restrictions. Contribute to quarkslab/android-restriction-bypass development by creating an account on GitHub.

Unlike an inventory of machines or services, user identities are usually already managed by existing G-Suite, Okta, Salesforce, or Microsoft Office 365. Almost all of these enterprise services expose OpenID Connect identity providers which are a suite of…

0 votes and 0 comments so far on Reddit

Security BSides San Francisco is a two-day information security conference. It is a conference by the community for the community.