Archive

But didn’t Microsoft kill ActiveX? I hear you asking. Well they almost did. As most security practitioners know, ActiveX has had a long history of exploitati...

Scammers are abusing the YouTube policy violation system by filing fake copyright infringements against content creators until their channel is close to being suspended. These scammers then hold the c…

Ever wondered what happens under-the-hood when you click on a telephone number on a webpage or email? Or why is it possible that you click on a link to the Android Play or Apple App Store and it opens…

Fast iOS executable dumper. Contribute to KJCracks/Clutch development by creating an account on GitHub.

Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and OS X Apps - nabla-c0d3/ssl-kill-switch2

My last blog post was like 1 year old so I thought I would quickly write something interesting with a bug I found recently on Twitter (Periscope). The bug (CSRF) itself is not particuarly impressive b…

Доброго времени суток, коллеги. Сегодня немного отойдем от тематики ebay и попиздим о шопах.Как найти дающие шопы и сэкономить своё время и нервы.

Выбираем сферу в какой будем работать. Строим план действий.

Всем привет, друзья) Тема безопасности и анонимности телеграма до сих пор постоянно обсуждается. И сегодня я хочу рассказать вам о том, каким образом можно украть доступ к телеграмму другого человека.…

In this post, we show how to reverse engineer the Magellan bug from the patch and exploit it on a 64bit desktop environment.

TL;DR With LeakLooker you can find publicly open MongoDB, CouchDB and Elasticsearch database, it also includes Kibana instances. Script…

TL;DR - By adding two parameters to any Google Search URL, you can replace search results with a Knowledge Graph card of your choice. A malicious user can use this to generate false information or ‘fa…

We open-sourced a fault injection tool, KRF, that uses kernel-space syscall interception. You can use it today to find faulty assumptions (and resultant bugs) in your programs. Check it out! This post…

An updated collection of resources targeting browser-exploitation. - m1ghtym0/browser-pwn

A command-line hex viewer. Contribute to sharkdp/hexyl development by creating an account on GitHub.

# 1. Background The Steam Chat client is a particularly interesting system to attack because it's built using a modern set of technologies with strong security characteristics. It's built on...

script to read the Windows 8.x OEM license key from PC firmware - christian-korneck/get_win8key

How to trick CSP in letting you run whatever you want

Scanning the Windows files for possible persistence mechanisms I came across a few interesting strings inside the Natural Language Development Platform 6 library (NaturalLanguage6.dll): StemmerDLLPath…

I want to believe that all of you know about ImageMagick and its Tragick. This issue was found in the end of the April, 2016 and due to many processing plugins depends on the ImageMagick library this …

Live streaming from the 35th Chaos Communication Congress

A Qt and C++ GUI for radare2 reverse engineering framework - radareorg/cutter

Install macOS in a VirtualBox machine on Ubuntu. GitHub Gist: instantly share code, notes, and snippets.

Google Code-in is an online programming competition for students hosted by Google that takes place every year. When I was signing up for a second time, I put a payload into all the text fields. I didn…

We identified a new exploit kit we named Novidade that targets home or small office routers by changing their Domain Name System (DNS) settings via cross-site request forgery (CSRF), enabling attacks …

This talk was presented at bugSWAT. Video of the talk is at https://youtu.be/B5ZyYTKp4gc Talk features: Password manager issue with iframe/CSP sandbox https://crbug.com/825258, https://bugzilla.mozill…

During our first security investigation for critical vulnerabilities affecting Microsoft, we came across multiple vulnerabilities that, when chained together, allow an attacker to take over any Micros…

A Fuzzing Drill Hits the Motherlode Research By: Yoav Alon, Netanel Ben-Simon Introduction The year 2017 was an inflection point in the vulnerability landscape. The number of new vulnerabilities repor…

This is the story of how I was able to get remote code execution on Hubspot 's servers by exploiting a vulnerability in HubL expression la...

[ WebAsm OOB ArrayBuffer ] WebAsm instance builder reads imports from an attacker-controlled object in v8/src/wasm/wasm-module.cc:1625 ProcessImports(). Imports can be getters, which run while the ins…