Ever fantasized about playing with docker misconfigurations, privilege escalation, etc. within a container? Download this VM, pull out your pentest hats and get started :) We have 2 Modes: HARD: This

tl;dr: this is not an audit and I take no responsibility for your backups, but I
had a quick look at the crypto and I think I'm going to use restic for my
personal backups.

I keep hearing good things
[http://jpmens.net/2017/08/22/my-backup-software-of-choice…

Earlier this month (August 2017) Troy Hunt founder of the website Have I been pwned? [0] released over 319 million plaintext passwords [1...

Last week I was contacted by someone alerting me to the presence of a spam list. A big one. That's a bit of a relative term though because whilst I've loaded "big" spam lists into Have I been pwned (HIBP) before, the largest to date has been a mere 393m records…

Malware Analysis - Fsociety crypto miner to mine bitcoins.

Boletín de noticias de seguridad informática unaaldia, ofrecido por Hispasec

Blog personal de Chema Alonso, consultor de seguridad en Informática 64, sobre seguridad, hacking, hackers, Cálico Electrónico y sus paranoias.

Vault 7 is a series of documents and tools released by WikiLeaks, that gives information about detailed activities and capabilities of the US CIA to perform spying and cyber warfare. Today, 31 August 2017, Wikileaks

WINspect is part of a larger project for auditing different areas of Windows environments. It focuses on enumerating different parts of a...

Now, finally sharing something new again, I present CertReq exfiltration! The Spark It all started one Thursday that I was on the bench with an innocuous looking tweet from subTee. He mentioned that it seemed like certreq.exe could arbitrarily POST to a server.…

Exploiting CVE-2016-10277 for untethered jailbreak on Moto devices (and more!)

Somewhat incredibly I am the first tech writer on the planet to break this story, but even more incredible is the fact that the FCC lets…

The OBi200 by Obihai is a VoIP gateway for home/SOHO that integrates with Google Voice. It supports most standard VoIP features out of the box and can integrate with virtually any “bring your own device” SIP service. I purchased one earlier this year to act…

Congreso de seguridad informática