Archive

Arrived onsite, sat down, plugged in. Started **Responder** (https://github.com/SpiderLabs/Responder), start **nbtscan**ning /24 *...

Posted by Mark Brand, Invalidator of Unic�o�d�e I’ve been investigating different fuzzing approaches on some Android devices recently, ...

With the help of a beautiful piece of code, malware authors can detect installed applications straig

Learn how to Ethically hack, Learn what it takes for a hacker to hack!

New techniques to bypass CFG and 32-bit ASLR. Video at: https://www.youtube.com/watch?v=mZU8o057n80

Last week, Microsoft released the MS16-063 security bulletin for their monthly Patch Tuesday (June 2016) security updates. It addressed vulnerabilities that affected Internet Explorer. Among other things, the patch fixes a memory corruption vulnerability in jscript9.dll related to TypedArray and DataView.

If you are here because you thought the title meant Return Oriented Programming (ROP), then sorry for the clickbait. I wanted to introduce a techninque to help exploit Relative Path Overwrite (RPO) when XSS is not an option by chaining "gadgets". This will be the first part of

Slides for BlueHat v16, Slightly modified version.

In October 13, 2015 Microsoft published security bulletin MS15-106, addressing multiple vulnerabilities in Internet Explorer. Zero Day Initiative published advisory ZDI-15-521 for one of those vulnerabilities affecting IE: Microsoft Windows VBScript Filter Function Remote Code Execution Vulnerability (CVE-2015-6055), so I decided to take a shot at it. Quoting ZDI's advisory:

Here we go again.... I have already blogged about (OAuth) token hijacks [1] [2] , but hey, things happens and re-happens :) In the past...

I spent some time quite a while ago looking into avast! and, after about a year, I am going to post about the issues that were found, and fi...

Last week we discussed how Microsoft Edge, the new browser in Windows 10, represented a significant increase in the security over Internet Explorer. However, there are also new potential threat vectors that aren’t present in older versions. Integrated plug-ins Microsoft Edge has now integrated two widely used plug-ins into the browser itself: Adobe Flash and a PDF reader....

Template engines are widely used by web applications to present dynamic data via web pages and emails. Unsafely embedding user input in templates enables Server-Side Template Injection, a frequently c

This demo shows Internet Explorer hacked over SMB, leading to complete compromise (remote Meterpreter Shell). As Demonstrated by Jonathan Brossard and Hormaz...

Sudo 1.8.14 (RHEL 5/6/7 / Ubuntu) - 'Sudoedit' Unauthorized Privilege Escalation. CVE-2015-5602. Local exploit for Linux platform

Check Point researchers outline a vulnerability discovered in core WordPress