The botnet run by TeamTNT has set its sights on Docker and Kubernetes environments, Redis servers, Postgres databases, Hadoop clusters, Tomcat and others.

Introduction As many of us know, there are a lot of guides and information on penetration testing applications on Windows and Linux. Unfortunately, a step-by-step guide doesn’t exist in the macOS...

Unlock LSASS memory dump secrets with a powerful PowerShell tool. Extract credentials and delve into hacker techniques.

For the last year, I’ve been working hard on creating what I believe to be the next stage in the evolution of tooling for penetration testers, web application security testers, security analysts, and security engineers—in short, anyone who spends time testing…

Some notes for Windows drivers reversing with IDA and GHIDRA

We will highlight the key points and then focus on the initial use of the CVE-2023-23397 vulnerability by attackers before it became public.

A simple story when Allah allowed me to successfully achieve P1 through a broken access control issue using an unexpected master ID of “0”.

BPF is a popular and powerful technology embedded in the Linux kernel and can potentially be used by threat actors as part of their malicious arsenal.

"Infosec Twitter," a vibrant community of security practitioners, known for its insight, inspiration, and entertainment, is coming to an end.

Every week, almost without fail, I come across one thing that confuses, entertains, or most commonly infuriates me. I’ve decided to keep a…

This blog provides an update of the technical strategy of Cobalt Strike and Outflank's OST individually before giving a glimpse into the future of the two combined.

We disclosed several GKE Autopilot vulnerabilities and attack techniques to Google. The issues are now fixed – we provide a technical analysis.

Google's security researcher, Tavis Ormandy, recently uncovered a critical vulnerability affecting AMD Zen2 CPUs. This flaw, tracked as CVE-2023-20593, could

A secret encryption cipher baked into radio systems used by critical infrastructure workers, police, and others around the world is finally seeing sunlight. Researchers say it isn’t pretty.

PE obfuscator with Evasion in mind needs Admin Privilege in order to load the RTCore64 driver. Drop RTCore64 to the disk

Derailed starts with a Ruby on Rails web notes application. I’m able to create notes, and to flag notes for review by an admin. The general user input is relatively locked down as far as cross site noscripting, but I’ll find a buffer overflow in the webassembly…