Archive

In this post, we explore how to bypass AMSI’s scanning logic by hijacking the RPC layer it depends on — specifically the NdrClientCall3…

Gui Rambo writes about his coding and reverse engineering adventures.

Technical Explanation of NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File

TL;DR — I built an automation that cloned and scanned tens of thousands of public GitHub repos for leaked secrets. For each repository I…

Phishers abused Google Sites and DKIM replay to send valid-signed emails, bypassing filters and stealing credentials.

Bug bounty hunting is full of surprises, and sometimes, the easiest vulnerabilities can pay the most. This is the story of how I stumbled…

Summary A vulnerability in PHP’s extract() function allows attackers to trigger a double-free in version 5.x or a user-after-free in versions 7.x, 8.x, which in turn allows arbitrary code execution (native code). Credit An independent security researcher, LCFR, working with SSD Secure Disclosure. Vendor Response The vendor (Zend) has addressed the issue: https://github.com/php/php-src/security/advisories/GHSA-4pwq-3fv3-gm94. Zend have … SSD Advisory – extract() double-free(5.X)/use-after-free(7.X/8.X) Read More »

Introduction

Here you can read all about my research and techniques I’ve gathered over time!

Have you ever come across an endpoint that you instinctively knew was vulnerable, but you couldn’t quite understand what was happening on…

Hey, I’m Mahmoud Mosbah, a cyber security specialist at Isec.

Did you know that Gmail allows the use of the form HTML tag? This feature presents a potential security risk, especially when attempting…

“The real game isn’t always in what you learn — it’s in what others forget to mention.” 😎

اللَّهُمَّ انْفَعْنِي بِمَا عَلَّمْتَنِي، وَعَلِّمْنِي مَا يَنْفَعُنِي، وَزِدْنِي عِلْمًا

Details of our SuperNote Nomad research which led to the disclosure of a 0-click RCE vulnerability

Discover how critical vulnerabilities in browser-based crypto wallets allowed attackers to drain funds without user interaction.

The SVG file format can harbor malicious HTML, scripts, and malware

CVE-2025-3248 is a critical code injection vulnerability affecting Langflow, a popular tool used for building out agentic AI workflows. This vulnerability is easily exploitable and enables unauthenticated remote attackers to fully compromise Langflow servers. The issue is patched in Langflow 1.3.0.

Introduction During a garage cleaning, we found a DVB receiver and thought it would be a great target for vulnerability research.

Principal Security Engineer Tao Sauvage discovered two SAP flaws on a client project, resulting in a CVE and a custom tool.

A vulnerability in the WinRAR file archiver solution could be exploited to bypass the Mark of the Web (MotW) security warning and execute arbitrary code on a Windows machine.

What's that Skippy? Another Ivanti Connect Secure vulnerability? At this point, regular readers will know all about Ivanti (and a handful of other vendors of the same class of devices), from our regular analysis. Do you know the fun things about these posts? We can copy text from previous posts

Weeks after Trustwave SpiderLabs reported on the Greatness phishing-as-a-service (PaaS) framework, the team uncovered another PaaS dubbed Tycoon Group.

Security experts

Sekoia.io provides cyber teams with a SOC platform that can respond to security incidents, regardless of the attack surface.

Sygnia investigates Weaver Ant, a stealthy China-nexus threat actor targeting telecom providers. Learn how web shells enable persistence and espionage.

Defensive tools like AVs and EDRs rely on command-line arguments for detecting malicious activity. This post demonstrates how command-line obfuscation, a shell-independent technique that exploits executables’ parsing “flaws”, can bypass such detections. It also introduces ArgFuscator, a new tool that identifies obfuscation opportunities and generates obfuscated command lines.

Hackers exploit CSS in emails to bypass spam filters and track user actions, raising privacy concerns.