System administrators use osquery for endpoint telemetry and daily monitoring. Security threat hunters use it to find indicators of compromise on their systems. Now another audience is discovering …

Quick Summary Hey guys today Sizzle retired and here’s my write-up about it. Sizzle was a great machine, everything about it was great. It was very realistic, fun and of course challenging as it was rated Insane. Personally one of my favorites and one of…

I’ve argued for some time that information security is in a growing state of cognitive crisis. Even with a deluge of freely available information, we do a poor job identifying and teaching th…

0 votes and 0 comments so far on Reddit

Vulners Scanner is developed by Vulners Team, the founders and maintainers of one of the world largest security databases.
It implements technology of passive vulnerability scanning based on software version fingerprint.

Q&A

Is it legal?

Absolutely.
Application…

Despite the huge effort that cybersecurity companies take to raise world’s population security sensitivity, people still tend to ignore…

In my last post (which you can read here), we walked through a semi-sophisticated attack which involved installing multiple backdoors, setting up coin mining operation, and maintaining persistence.…

This post walks through the discovery process of the NVIDIA GeForce Experience OS command injection vulnerability, assigned to CVE-2019-5678.

dump. Contribute to n1xbyte/CVE-2019-0708 development by creating an account on GitHub.

For many years, my friend Stéphane Sigmen and I were involved in the CTF of Hackfest.ca, a great conference and on-site CTF event that…

A collection of malware samples and relevant dissection information, most probably referenced from http://blog.inquest.net - InQuest/malware-samples

This crisis is about much more than one company

The ‘Internet of Things’ is coming! It started as an overused marketing hype with no real use case (who needs internet connected fridges? Who wants the internet connected toilet paper?)…

IntroductionIn this article about Kerberos, a few attacks against the protocol will be shown. In order to refresh the concepts behind the following attacks, it is recommended to check the first part of this series which covers Kerberos theory.The post is…

0 votes and 0 comments so far on Reddit

Backward Compatibility is Hard, and so is Stacked Impersonation by Simon Raner and Mitja Kolsek, the 0patch Team Last August we is...

This writeup is intended to be a bit of storytelling. I would like to show how I went down the rabbit hole in a quick ’research’ I wanted to do, and eventually found a local privilege escalation vulnerability in macOS. I also want to show, tell about all…

Some of my security stuff and vulnerabilities. Nothing advanced. More to come. - numirias/security

About 11.9 million Quest Diagnostics patients may have had their financial, medical and other personal information exposed in a data breach, the company said Monday.

Laboratory for those who are interested in learning about web security - globocom/secDevLabs