In this post we will be looking at AWS Lambda, how we can deploy code using the Serverless framework, and how we can use this technology as a redirector for Cobalt Strike

✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️ - 0x4D31/awesome-threat-detection

This most recent Patch Tuesday, Microsoft released an Important-rated patch to address a remote code execution bug in Microsoft Exchange Server. This vulnerability was reported to us by an anonymous researcher and affects all supported versions of Microsoft…

Kr00k – formally known as CVE-2019-15126 – is a vulnerability in Broadcom and Cypress Wi-Fi chips that allows unauthorized decryption of some WPA2-encrypted traffic.

Monitoring the relationships between parent and child processes is very common technique for threat hunting teams to detect malicious activities. For example if PowerShell is the child process and …

Course materials for Advanced Binary Deobfuscation by NTT Secure Platform Laboratories - malrev/ABD

Scripts for the Ghidra software reverse engineering suite. - ghidraninja/ghidra_noscripts

Though we’re now almost to March, I’m still spending my free time working though VMware pwning as part of my 2019 advent calendar. I’d given myself 3 VMware challenges to look at, including one CTF challenge from Real World CTF Finals in 2018, and two n-days…

Contribute to wavestone-cdt/abaddon development by creating an account on GitHub.

Cyber Threat hunting workshop - Download as a PDF or view online for free

Privilege escalation always comes down to proper enumeration. But to accomplish proper enumeration you need to know what to check and look for. This takes familiarity with systems that normally comes along with experience. At first privilege escalation can…

FuzzBench - Fuzzer benchmarking as a service. Contribute to google/fuzzbench development by creating an account on GitHub.

In my various pentesting experiments, I'll pretend to be a blue team defender and try to work out the attack. If you have good security eyes, you can search for…

One of my all time favorite subfields of reverse engineering is the dissection of viruses. In this article I will be exploring malware…

repurposing a 1st-stage loader, to execute custom 'fileless' payloads

Insecure deserialization vulnerabilities have become a popular target for attackers/researchers against Java web applications. These vulnerabilities often lead to reliable remote code execution and are generally difficult to patch. In this blog post, we will…