Archive

This blog post details how a combination of a Path Traversal and Local File Inclusion vulnerability lead to Remote Code Execution in the WordPress core. The vulnerability remained uncovered in the Wor…

After receiving an email from facebook that somebody requested to join my group I decided to open the link in a different account to see…

IP cameras, printers, industrial controls to name a few..

The Rapid7 Project Sonar datasets are amazing resources. They represent scans across the internet, compressed and easy to download. This blog post will focus on two of these datasets: https://opendata…

There are a few methods that can be used to legitimately install extensions on macOS

But didn’t Microsoft kill ActiveX? I hear you asking. Well they almost did. As most security practitioners know, ActiveX has had a long history of exploitati...

Scammers are abusing the YouTube policy violation system by filing fake copyright infringements against content creators until their channel is close to being suspended. These scammers then hold the c…

Ever wondered what happens under-the-hood when you click on a telephone number on a webpage or email? Or why is it possible that you click on a link to the Android Play or Apple App Store and it opens…

Fast iOS executable dumper. Contribute to KJCracks/Clutch development by creating an account on GitHub.

Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and OS X Apps - nabla-c0d3/ssl-kill-switch2

My last blog post was like 1 year old so I thought I would quickly write something interesting with a bug I found recently on Twitter (Periscope). The bug (CSRF) itself is not particuarly impressive b…

Доброго времени суток, коллеги. Сегодня немного отойдем от тематики ebay и попиздим о шопах.Как найти дающие шопы и сэкономить своё время и нервы.

Выбираем сферу в какой будем работать. Строим план действий.

Всем привет, друзья) Тема безопасности и анонимности телеграма до сих пор постоянно обсуждается. И сегодня я хочу рассказать вам о том, каким образом можно украть доступ к телеграмму другого человека.…

In this post, we show how to reverse engineer the Magellan bug from the patch and exploit it on a 64bit desktop environment.

TL;DR With LeakLooker you can find publicly open MongoDB, CouchDB and Elasticsearch database, it also includes Kibana instances. Script…

TL;DR - By adding two parameters to any Google Search URL, you can replace search results with a Knowledge Graph card of your choice. A malicious user can use this to generate false information or ‘fa…

We open-sourced a fault injection tool, KRF, that uses kernel-space syscall interception. You can use it today to find faulty assumptions (and resultant bugs) in your programs. Check it out! This post…

An updated collection of resources targeting browser-exploitation. - m1ghtym0/browser-pwn

A command-line hex viewer. Contribute to sharkdp/hexyl development by creating an account on GitHub.

# 1. Background The Steam Chat client is a particularly interesting system to attack because it's built using a modern set of technologies with strong security characteristics. It's built on...

script to read the Windows 8.x OEM license key from PC firmware - christian-korneck/get_win8key

How to trick CSP in letting you run whatever you want

Scanning the Windows files for possible persistence mechanisms I came across a few interesting strings inside the Natural Language Development Platform 6 library (NaturalLanguage6.dll): StemmerDLLPath…

I want to believe that all of you know about ImageMagick and its Tragick. This issue was found in the end of the April, 2016 and due to many processing plugins depends on the ImageMagick library this …

Live streaming from the 35th Chaos Communication Congress

A Qt and C++ GUI for radare2 reverse engineering framework - radareorg/cutter