The Chakra Exploit and the Limitations of Modern Mitigation Techniques | En
Last November, Microsoft released a security update for Microsoft Edge which included patches for vulnerabilities CVE-2016-7200 and CVE-2016-7201, which were discovered by Google Project Zero.
Places of Interest in Stealing NetNTLM Hashes | ?Blog of Osanda
One day me and @m3g9tr0n was discussing different places where we can use responder in stealing NetNTLM hashes. After experimenting I thought of writing this post along with some cool findings in t…
Disarming EMET 5.52: Controlling it all with a single write action | blog.r
The Enhanced Mitigation Experience Toolkit (EMET) is a software solution from Microsoft that aims at preventing the exploitation of – legacy – software. It is designed to “help prevent …
The Secret Life of a Bug Bounty Hunter – Frans Rosén @ Security Fest …
Frans Rosén has reported hundreds of security issues using his big white hat since 2012. He have recieved the biggest bounty ever paid on HackerOne, and is one…
From Serialized to Shell :: Exploiting Google Web Toolkit with EL Injection
This is a follow up blog post to my previous post on auditing Google Web Toolkit (GWT). Today we are going to focus on a specific vulnerability that I found ...
Hi, this is my first (and last?) blog post in English. Sorry if there's any grammatical mistake, I'm not too fluent in English. Today, I'll write about ePub file with some of my findings in ePub readers. So What's ePub file? EPUB is an e-book file format with the extension .epub that can be downloaded and read on devices like smartphones, tablets, computers, or e-readers. And in technical implementation An EPUB file is a ZIP archive that contains, in effect, a website—including HTML files, images, CSS style sheets, and other assets. It also contains metadata. EPUB 3 is the latest version....
This book reads you - exploiting services and readers that support the ePub
“We use the ePub format - it is the most popular open book format in the world. We’re very excited about this.” - Steve Jobs, 2010 (original iPad launch)
![[0day] Text/Plain Considered Harmful – Jan's security blog](https://rdl.ink/render/https%3A%2F%2Fjankopecky.net%2Fwp-content%2Fuploads%2F2017%2F04%2Farticle_textplain.png?width=92&height=&ar=&mode=&dpr=2)
