Archive

Гугл любит пасхалки. Любит настолько, что найти их можно практически в каждом продукте компании. Традиция пасхалок в Android тянется с самых первых версий опера...

Good news! There’s new security distro called SigintOS becoming available for download. SigintOS is an Ubuntu based distribution with a…

Contribute to xsleaks/xsleaks development by creating an account on GitHub.

Blog

Analysis of public exploits or my 1day exploits

📝 Algorithms and data structures implemented in JavaScript with explanations and links to further readings - trekhleb/javascript-algorithms

In 2017, we encountered lots of samples that were ‘exploiting’ the implementation of Microsoft Word’s RTF parser to confuse all other third-party RTF parsers, including those used in anti-malware soft…

in , , , Short version: For the $12 cost of a domain, I was able to rank in Google search results with Amazon, Walmart etc. for high value money terms in the US. The Adwords bid price for some these t…

The Google Public Data Explorer allows users to upload their own datasets for visualization and exploration. To get started: Describe your dataset using the Dataset Publishing Language (DSPL), an open, XML-based metadata format optimized for data visualization. See the documentation on Google Code for more information. Bundle your data and metadata into a single Zip file, and upload it using the button below. Preview, share, and publish your dataset for others to see and use.

pastebin

Анализ 100 заголовков на эффективность в рекламе в социальных сетях. Вразы которые вовлекают больше всего.

# The Difference between Google Chrome and Chromium on Linux Chromium on Linux has two general flavors: You can either get [Google Chrome](http://www.google.com/chrome?platform=linux) or chromium-brow…

Disable SSL verification and pinning on Android, system-wide - ViRb3/TrustMeAlready

This article will briefly explain methods behind the mobile malware unpacking. It will be focusing on Anubis since it is the latest trending malware for almost a year now. Actors use dropper applicati…

# Ad Tagging in Chromium Chromium is able to detect some ads and the resources they load in the browser. This enables the browser to measure the size, performance, and count of ads displayed to our us…

Microsoft Windows MSHTML Engine - "Edit" Remote Code Execution. CVE-2019-0541 . local exploit for Windows platform

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and 150 other CMSs - Tuhinshubhra/CMSeeK

Hello again. In my previous posts I detailed how to manually get SYSTEM shell from Local Administrators users. That’s interesting but very late game during a penetration assessment as it is presumed t…

MouseJack was publicly disclosed February 23rd 2016 and in 2017 an exploit for this vulnerability was released named JackIt.

Facebook Messenger server random memory exposure through corrupted GIF image

Hunting Bugs for Fun and Profit. Contribute to 1hack0/Facebook-Bug-Bounty-Write-ups development by creating an account on GitHub.

What happens when an image is also javascript? And when that Image does not even need a payload to extract the malware from the image.. Well then you have a polyglot!

Research by: Nadav Grossman Introduction In this article, we tell the story of how we found a logical bug using the WinAFL fuzzer and exploited it in WinRAR to gain full control over a victim’s comput…

Hi Guys, This is yet another a security vulnerability writeup about a chain of security vulnerabilities that linked up to compromise one…