Privilege escalation always comes down to proper enumeration. But to accomplish proper enumeration you need to know what to check and look for. This takes familiarity with systems that normally comes along with experience. At first privilege escalation can…

Security notes for learning and sharing

In a recent update to Sysmon, a new feature was introduced allowing the ability to log DNS events. While this gives an excellent datapoint for defenders (shout out to the SysInternals team for continuing to provide and support these awesome tools for free)…

An excellent write up on the HackTheBox 'Eat Cake' challenge from @Andy74_italy who reverse engineers his way in. https://t.co/dtGHNJ9XKZ

PoC for triggering buffer overflow via CVE-2020-0796 - eerykitty/CVE-2020-0796-PoC

List of Awesome Red Teaming Resources. Contribute to yeyintminthuhtut/Awesome-Red-Teaming development by creating an account on GitHub.

Are cybercriminals and scammer's taking advantage of increased communication around COVID-19? Discovery shows new surveillanceware exploits the pandemic.

Microsoft has bought the corp.com domain, which was up for sale, to try to head off security issues that could affect thousands of Windows PCs.

The TikTok app uses insecure HTTP to download media content. Like all social media apps with a large userbase, TikTok relies on [Content Delivery Networks (CDNs)](https://en.wikipedia.org/wiki/Content_delivery_network) to distribute their massive data geographically.…

Posted by hugeh0ge, Ricerca Security NOTE: We have decided to make our PoC exclusively available to our customers to avoid abuse by scr...

I’ve started a new journey in this quarantine times and decided to investigate OWASP Top 10 and write about it as much in detail as…

articles. Contribute to blaCCkHatHacEEkr/PENTESTING-BIBLE development by creating an account on GitHub.

We’re the Electronic Frontier Foundation, a member-supported non-profit working to protect online privacy for over thirty-five years. This is Surveillance Self-Defense: our expert guide to protecting you and your friends from online spying.

Read the BASICS…

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers. - BC-SECURITY/Empire