On a whim, I tossed this into the address field of the registrant data of a domain so it’d appear in whois records…

Technical details about how to pivot through a Microsoft SQL Server . Using mssql as a proxy for lateral movement

How to run Windows 10 on ARM or Ubuntu for ARM64 in QEMU on Apple Silicon Mac - README.en.md

Google has found thousands of security vulnerabilities and other bugs using Fuzzing. Now we are introducing the Atheris fuzzing engine.

XS-Leaks Wiki # Overview # Cross-site leaks (aka XS-Leaks, XSLeaks) are a class of vulnerabilities derived from side-channels 1 built into the web platform. They take advantage of the web’s core principle of composability, which allows websites to interact…

Contribute to oskarsve/ms-teams-rce development by creating an account on GitHub.

holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function. - megadose/holehe

So…this one’s been here for a while: a local privilege escalation vulnerability in PsExec. This local privilege escalation allows a…

TrustedSec's blog is an expert source of information on information security trends and best practices for strategic risk management.

Read a helpful overview of the Bronze Bit attack (CVE-2020-17049) against Kerberos implementations in Windows Active Directory.

Intro to the book contents and what to expect.

Sophos-ReversingLabs 20 million sample dataset. Contribute to sophos/SOREL-20M development by creating an account on GitHub.

A private Lumina server for IDA Pro. Contribute to naim94a/lumen development by creating an account on GitHub.

Learn how to emulate, trace, debug, and Reverse Engineer UEFI modules in part 2 of our new blog series on Firmware Security

Inspired by Kevin Backhouse’s great work on finding XNU remote vulnerabilities I decided to spend some time looking at CodeQL and performing some variant analysis. This lead to the discovery of a local root to kernel (although documented by Apple as remote)…

Follow David on Twitter @Davkorcz: https://twitter.com/Davkorcz
Follow us on Twitter: @ADALogics at https://twitter.com/ADALogics

This video gives an introduction to SymCC
SymCC paper and author presentation: https://www.usenix.org/conference/usenixsecu…

Гипервизор производства корпорации Microsoft содержит определенное количество ошибок. Поиск этих ошибок — занятие не только увлекательное, но и полезное: во-первых, Microsoft располагает собственной программой Bug Bounty, а во-вторых, знания о недокументированных…

Visualize the virtual address space of a Windows process on a Hilbert curve. - 0vercl0k/clairvoyance