Elastic Security Labs uncovers RONINGLOADER, a multi-stage loader deploying DragonBreath’s updated gh0st RAT variant. The campaign weaponizes signed drivers, thread-pool injection, and PPL abuse to disable Defender and evade Chinese EDR tools.

The recent reveal of Meltdown and Spectre reminded me of the time I found a related design bug in the Xbox 360 CPU – a newly added instruction whose mere existence was dangerous. Back in 2005 I was…

Header‑only C++ library for Native API syscall invocation on x64 Windows - wufhex/Syscaller

Master Raspberry Pi with our comprehensive guides covering setup, programming, troubleshooting, and advanced projects.

Albatross Server is the core component of the Albatross dynamic instrumentation tool. It enables Albatross not only to be packaged into an app but also to be dynamically injected. It is responsible...

Hardware & firmware security analysis of the TP-Link AC1200. Gained root shell via UART & U-Boot to dump firmware for vulnerability research. - codyaj/TP-Link-TL-WA1201-Vulnerability-Analysis

Exploit Development and Reverse Engineering with GDB & LLDB Made Easy - pwndbg/pwndbg

Welcome to this new Medium post. In this one, I have an interesting way to get the persistence in Windows that I’ve never seen anywhere, so…

Windows 11 24h2 LPE Kernel Exploitation. CVE-2020-12446(eneio64.sys) - enessakircolak/Windows-11-24h2-Kernel-Exploit

Tech magazine for cybersecurity specialists

What’s up, ops? If you’re knee-deep in red teaming like menoscripting payloads that get sniped by AMSI before they even blink this one’s for…