Archive

Analysis of public exploits or my 1day exploits

📝 Algorithms and data structures implemented in JavaScript with explanations and links to further readings - trekhleb/javascript-algorithms

In 2017, we encountered lots of samples that were ‘exploiting’ the implementation of Microsoft Word’s RTF parser to confuse all other third-party RTF parsers, including those used in anti-malware soft…

in , , , Short version: For the $12 cost of a domain, I was able to rank in Google search results with Amazon, Walmart etc. for high value money terms in the US. The Adwords bid price for some these t…

The Google Public Data Explorer allows users to upload their own datasets for visualization and exploration. To get started: Describe your dataset using the Dataset Publishing Language (DSPL), an open, XML-based metadata format optimized for data visualization. See the documentation on Google Code for more information. Bundle your data and metadata into a single Zip file, and upload it using the button below. Preview, share, and publish your dataset for others to see and use.

pastebin

Анализ 100 заголовков на эффективность в рекламе в социальных сетях. Вразы которые вовлекают больше всего.

# The Difference between Google Chrome and Chromium on Linux Chromium on Linux has two general flavors: You can either get [Google Chrome](http://www.google.com/chrome?platform=linux) or chromium-brow…

Disable SSL verification and pinning on Android, system-wide - ViRb3/TrustMeAlready

This article will briefly explain methods behind the mobile malware unpacking. It will be focusing on Anubis since it is the latest trending malware for almost a year now. Actors use dropper applicati…

# Ad Tagging in Chromium Chromium is able to detect some ads and the resources they load in the browser. This enables the browser to measure the size, performance, and count of ads displayed to our us…

Microsoft Windows MSHTML Engine - "Edit" Remote Code Execution. CVE-2019-0541 . local exploit for Windows platform

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and 150 other CMSs - Tuhinshubhra/CMSeeK

Hello again. In my previous posts I detailed how to manually get SYSTEM shell from Local Administrators users. That’s interesting but very late game during a penetration assessment as it is presumed t…

MouseJack was publicly disclosed February 23rd 2016 and in 2017 an exploit for this vulnerability was released named JackIt.

Facebook Messenger server random memory exposure through corrupted GIF image

Hunting Bugs for Fun and Profit. Contribute to 1hack0/Facebook-Bug-Bounty-Write-ups development by creating an account on GitHub.

What happens when an image is also javascript? And when that Image does not even need a payload to extract the malware from the image.. Well then you have a polyglot!

Research by: Nadav Grossman Introduction In this article, we tell the story of how we found a logical bug using the WinAFL fuzzer and exploited it in WinRAR to gain full control over a victim’s comput…

Hi Guys, This is yet another a security vulnerability writeup about a chain of security vulnerabilities that linked up to compromise one…

Exploits and/or advisories. Contribute to kmkz/exploit development by creating an account on GitHub.

This blog post details how a combination of a Path Traversal and Local File Inclusion vulnerability lead to Remote Code Execution in the WordPress core. The vulnerability remained uncovered in the Wor…

After receiving an email from facebook that somebody requested to join my group I decided to open the link in a different account to see…

IP cameras, printers, industrial controls to name a few..

The Rapid7 Project Sonar datasets are amazing resources. They represent scans across the internet, compressed and easy to download. This blog post will focus on two of these datasets: https://opendata…

There are a few methods that can be used to legitimately install extensions on macOS