Reading Uber’s Internal Emails
Uber’s subdomain takeover
A Guide To Subdomain Takeovers
HackerOne's Hacktivity feed — a curated feed of publicly-disclosed reports — has seen its fair share of subdomain takeover reports. Since Detectify's fantastic series on subdomain takeovers, the bug b…
Windows Offender: Reverse Engineering Windows Defender's Antivirus Emulator by Alexei Bulazel
[BLACKHAT US 2018] WebAssembly: A New World of Native Exploits on the Browser by Justin Engler and Tyler Lukasiewicz
Using PoolTags to Fingerprint Hosts
Commonly, malware will fingerprint the host it executes on, in an attempt to discover more about its environment and act accordingly. Part of this process is quite often dedicated to analyzing spec…
Clickjackings in Google worth 12644.7$
clickjacking in google and…
Why so Spurious? (BlackHat 2018) - Final
Error-Prone x86/x64 CPU "Feature" can be Abused to Achieve Local Privilege Escalation on Many Operating Systems
CS:GO RCE 0-day - Real World CTF Qualifiers 2018
This was the P90_Rush_B challenge from Real World CTF Qualifiers - 2018, in which we participated as perfect blue This challenge was solved by @j0nathanj and @VoidMercy_pb. Unfortunately we did not ma…
Светлые паттерны Амазона
1 августа 2018 года была опубликована статья "Тёмные паттерны Amazon", мало того, что переводная, так и кроме этого содержащая крайне мало фактических данных,...
downloaded are being scanned by the antivirus program
When IOfficeAntiVirus::Scan method is called by the programs (or internally via IAttachmentExecute) the system enumerates the Registry, collects info about all components implementing IOfficeAntiVirus, and stores them inside the following location
LFI and SSRF via XXE in emblem editor
This summary is provided by the researcher who submitted this report, @alexbirsan ....
Google Open URL Redirection Vulnerability which does the Social Engineering part too.
on | | | | | | Twitter: @teh_h3ck Email: vag[d0t]mourikis[@]gmail.com Open URL Redirection definition, quoted by OWASP: "An open redirect is an application that takes a parameter and redirects a user …
UWP Localhost Network Isolation and Edge
“feature” added to Windows to support Edge accessing the loopback network interface. For referenc...
Google Chrome pdfium shading drawing integer overflow lead to RCE
Vulnerability Credit Zhou Aiting(@zhouat1) of Qihoo 360 Vulcan Team 1. Vulnerability Description CVE：CVE-2018-6120 Affected versions：Chrome Version < 66.0.3359.170 2. Vulnerability analysis 2.1 Vulner…
Gerrit Code Review
RFID Thief v2.0
Building and using the RFID Thief v2.0 for long range RFID cloning
Новая техника атак на основе Meltdown. Использование спекулятивных инструкций для детектирования виртуализации
Атака Meltdown открыла новый класс атак на процессоры, использующий архитектурные состояния для передачи информации. Но спекулятивное исполнение, которое было...
Advanced Mobile Malware Campaign in India uses Malicious MDM
A blog from the world class Intelligence Group, Talos, Cisco's Intelligence Group
ssrf exploiting url parser in trending programming languages
x0rz/tweets_analyzer
Tweets metadata scraper & activity analyzer
EagleEye
Stalk your Friends. Find their Instagram, FB and Twitter Profiles using Image Recognition and Reverse Image Search.
G.-Geshev-and-Rob-Miller-Chainspotting.pdf
Take Advantage of Out-of-Scope Domains in Bug Bounty Programs • Abdullah Hu
Last year, I got an invitation from a private bug bounty program on HackerOne platform. I said let’s give it a try since I had some free time and here is the...
Exploiting Electron RCE in Exodus wallet – Hacker Noon
While browsing Twitter I’ve noticed ElectronJS remote code execution vulnerability in protocol handler. That sounds severe. As stated in…
Unrestricted File Upload at Apple.com / Хабр
Внимание — это фривольный перевод заметки о том, как именно Jonathan Bouman нашёл публичный AWS S3, который использовался на одном из поддоменнов apple.com.
I discovered a browser bug - JakeArchibald.com
I accidentally discovered a huge browser security bug. Here's what it does, and how I discovered it…
[messaging] Modern anti-spam and E2E crypto
XSS in Google Colaboratory workaround Content-Security-Policy
Vulnerability Discovery Against Apple Safari | Ret2 Systems Blog
Vulnerability discovery is the first stage of the exploit development lifecycle. The duration of this phase is open-ended because the search space, code qual...
Pentester's Windows NTFS Tricks Collection | SEC Consult
In this blog post René Freingruber (@ReneFreingruber) from the SEC Consult Vulnerability Lab shares different filesystem tricks which were collected over the