The Cyber Mentor provides cybersecurity and penetration testing training via Twitch, YouTube, and more.

In this post I'm going to walk you through how I used behavioural fuzzing to find multiple quirks in Firefox. Normally, when fuzzing the goal is to find a crash indicating memory corruption, but my go

How WhatsApp Was Hacked By Exploiting a Buffer Overflow Security Flaw

0 votes and 0 comments so far on Reddit

The non-intrusive online test quickly verifies relevant GDPR and PCI DSS requirements, checks CMS security and runs a privacy check.

0 votes and 0 comments so far on Reddit

Read how Guardicore Labs revealed an end-to-end attack campaign infrastructure, designed to scan, brute-force and infect tens of thousands of MS-SQL and PHPMyAdmin servers on the internet.

Lyon, 15 May 2019: iExec has released its V3, which introduces a new Data Wallet feature that makes secure data renting possible. With…

How we built our service encryption infrastructure to optimize for operability and performance, while satisfying the right security model for each service.

I lost north of $100,000 last Wednesday. It evaporated over a 24 hour timespan in a “SIM port attack” that drained my Coinbase account.

The story of a major hash table vulnerability, and how it took a decade to uncover and resolve.

The purpose of this post is to share how one would use a debugger to identify the relevant code path that can trigger the crash. I hope…

0 votes and 3 comments so far on Reddit

Hey 0x00ers! I’m so sorry that it’s been such a long time since I’ve dropped an article here! I’ve been writing for my current company navisec.io @ delta.navisec.io and I’ve not had the chance to drop a good article for 0x00sec for a little while. Today…

Reversing using IDA Pro and inject shellcode with Python

Proof of concept for CVE-2019-0708. Contribute to Ekultek/BlueKeep development by creating an account on GitHub.

How a failing red-team engagement led us to find a silly zero day. And why “insecure by default” is still an issue in 2019.

I recently wrote a CTF challenge for my coworkers. The challenge was written using WebAssembly (WASM), a language I initially knew nothing about. I found the language specification and various API…

CoreOs rkt contains 3 new unpatched CVEs,

A vulnerability in all versions of the Docker platform can give an attacker full read and write access to the host file system.

Recorded Future is being acquired by tech investor Insight Partners in a $780 million all-cash deal, the cyber-threat intelligence company announced this