Posted by James Forshaw, abusing symbolic links like it’s 1999. For the past couple of years I’ve been researching Windows elevation of ...

Views

Do you like strings? Do you like to find strings? How about in binary data? What about via regular expressions? ME TOO! bstrings works l...

Doing an assessment and want to capture some hashes? Here's 10 methods you can try to get a user to authenticate to you over SMB.

In a recent research project, Markus Wulftange of Code White discovered several critical vulnerabilities in the Symantec Endpoint Protection...

Intro

Blue Frost has realised a new security note OpenSSH 6.9p1 Authentication Bypass / Use-After-Free

sinkhole - Architectural privilege escalation on x86

NetFormation helps businesses navigate digital transformation via Level 3’s unique network with a focus on growth, efficiency, innovation and connections

In Ming Loh has realised a new security note Firefox < 39.03 - pdf.js Same Origin Policy Exploit

NB: This blog post will be updated in the upcoming days with more information Introduction A few days before the publishing of this blog post I came across an unknown RTF exploit sample which I cou…

Detecting XSS auditor James pointed out to me that XSS auditor in Chrome has a block mode and I thought it might be interesting to see if this could be exploited in some way. When the http header is s

More and more software vulnerabilities are discovered each year, and hundreds of public disclosures may occur on the same day. For example, the CVE …

H5SC - HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

CrowdShield | Create your bug bounty disclosure program and leverage ethical hackers from around the world!

Posted by Chris Evans, Cookie Monster With the release of Flash 18.0.0.209 , two mitigations were introduced to combat abuse of Vector ...