The following research outlines a vulnerability discovered in netmask npm package that is currently used by 278,722+ other projects. The vulnerability has been present for 9 years. Since this package is so incredibly widespread, I would suggest every nodejs…

In this video walkthrough, we setup, install, configure and run Nessus vulnerability scanner as part of the Cyber Defense Pathway in TryHackMe.
-----------
Room Link
https://tryhackme.com/room/rpnessusredux
------------
Backup channel
https://www.youtube…

Unlock an Android phone (or device) by bruteforcing the lockscreen PIN. Turn your Kali Nethunter phone into a bruteforce PIN cracker for Android devices! (no root, no adb) - urbanadventurer/Android...

if You wanna support me in patron , thank you

https://www.patreon.com/MahmoudElMenshawy?fbclid=IwAR2lZM5Ecj4gn780pWhpdPIEtKmt1EUTqgrVCvl38YbRVpGRz9GIjxNaXlQ


You will find a written report here
my blogger
https://menshaway.blogspot.com/2021/03/njrat…

11 files

A41APT is a long-running campaign with activities detected from March 2019 to the end of December 2020. Most of the discovered malware families are fileless malware and they have not been seen before.

This tool can help you to see the real IP behind CloudFlare protected websites. - zidansec/CrimeFlare

Learn how attackers use the Windows Background Intelligent Transfer Service (BITS) as a method for maintaining the persistence of malicious applications.

CobaltStrike became part of the Cybercrime’s “toolset” almost in every Company breach. This growth is explained by the fact that CobaltStrike was leaked multiple times and became more accessible for malicious groups. Below is a statistics made by RecordedFuture…

I'm gonna give you malicious emails everyday .. so please check these emails in your organization or at your personal emails.


if You wanna support me in patron , thank you

https://www.patreon.com/MahmoudElMenshawy?fbclid=IwAR2lZM5Ecj4gn780pWhpdPIEtK…

You will find a written report here
my blogger
https://menshaway.blogspot.com/2021/04/agenttesla-malware.html

IF You wanna support me in patron , thank you

https://www.patreon.com/MahmoudElMenshawy?fbclid=IwAR2lZM5Ecj4gn780pWhpdPIEtKmt1EUTqgrVCvl38Y…

A cheat sheet about Microsoft Windows Privileges.

Proof of concept for CVE-2021-24086, a NULL dereference in tcpip.sys triggered remotely. - 0vercl0k/CVE-2021-24086

In this blog post we analyze a denial of service vulnerability affecting the IPv6 stack of Windows. This issue, whose root cause can be found in the mishandling of IPv6 fragments, was patched by Microsoft in their February 2021 security bulletin.

Fileless persistence: The rootkit resides in the system memory and does not write any files to the disk. This is achieved in multiple stages.

In this article we review methods to extract credentials from lsass process memory despite LSA protection and RunAsPPL registry settings.

A repository for learning various heap exploitation techniques. - shellphish/how2heap

A list of useful payloads and bypass for Web Application Security and Pentest/CTF - swisskyrepo/PayloadsAllTheThings

In this series we’ll document a novel and as-yet-undocumented Virtual Machine detection trick for each month of 2021. These detection tricks will be focused on 64-bit Windows 10 or Windows Server 2019 guests, targeting a variety of VM platforms.