A few weeks ago an ordinary security assessment turned into an incident response whirlwind. It was definitely a first for me, and I was kindly granted permission to outline the events in this blog post. This investigation started scary but turned out be quite…

This write up will cover how one can go about analyzing radio signals transmitted over the air using software defined radio. GNU-Radio, URH

Product: McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 Type: OWASP Top Ten 2013 Category A10 - Unvalidated Redirects and Forwards Summary: Unvali...

The following research outlines a vulnerability discovered in netmask npm package that is currently used by 278,722+ other projects. The vulnerability has been present for 9 years. Since this package is so incredibly widespread, I would suggest every nodejs…

In this video walkthrough, we setup, install, configure and run Nessus vulnerability scanner as part of the Cyber Defense Pathway in TryHackMe.
-----------
Room Link
https://tryhackme.com/room/rpnessusredux
------------
Backup channel
https://www.youtube…

Unlock an Android phone (or device) by bruteforcing the lockscreen PIN. Turn your Kali Nethunter phone into a bruteforce PIN cracker for Android devices! (no root, no adb) - urbanadventurer/Android...

if You wanna support me in patron , thank you

https://www.patreon.com/MahmoudElMenshawy?fbclid=IwAR2lZM5Ecj4gn780pWhpdPIEtKmt1EUTqgrVCvl38YbRVpGRz9GIjxNaXlQ


You will find a written report here
my blogger
https://menshaway.blogspot.com/2021/03/njrat…

11 files

A41APT is a long-running campaign with activities detected from March 2019 to the end of December 2020. Most of the discovered malware families are fileless malware and they have not been seen before.

This tool can help you to see the real IP behind CloudFlare protected websites. - zidansec/CrimeFlare

Learn how attackers use the Windows Background Intelligent Transfer Service (BITS) as a method for maintaining the persistence of malicious applications.

CobaltStrike became part of the Cybercrime’s “toolset” almost in every Company breach. This growth is explained by the fact that CobaltStrike was leaked multiple times and became more accessible for malicious groups. Below is a statistics made by RecordedFuture…

I'm gonna give you malicious emails everyday .. so please check these emails in your organization or at your personal emails.


if You wanna support me in patron , thank you

https://www.patreon.com/MahmoudElMenshawy?fbclid=IwAR2lZM5Ecj4gn780pWhpdPIEtK…

You will find a written report here
my blogger
https://menshaway.blogspot.com/2021/04/agenttesla-malware.html

IF You wanna support me in patron , thank you

https://www.patreon.com/MahmoudElMenshawy?fbclid=IwAR2lZM5Ecj4gn780pWhpdPIEtKmt1EUTqgrVCvl38Y…

A cheat sheet about Microsoft Windows Privileges.