Part of the NSA cyber weapon framework DanderSpritz is eventlogedit, a piece of software capable of removing individual lines from Windows Event Log files. Now that this tool is leaked and public, …

Rapid7 just wrapped up the second of their Metsploitable3 CTFs, this time for the Linux version of the intentionally vulnerable OS that both beginner and advanced hackers can hone their skills on. They only allowed 500 participants/teams worldwide. I had…

makin - reveal anti-debugging and anti-VM tricks [This project is not maintained anymore] - secrary/makin

If you need a quick OpenSSH client or server for Windows 10, there is a beta client hidden and available for installation

Automatically Launch Google Hacking Queries Against A Target Domain - 1N3/Goohak

Expertos de seguridad encuentran 85 aplicaciones más en la Play Store, con millones de descargas, que robaban las contraseñas de los usuarios.

TRITON malware is a new attack framework built to interact with Triconex SIS controllers and causes operational disruption to critical infrastructure.

In this post, we will take a look at the possibility of a XSS exploit and a cookie compromise stemming from “unusual” Safari behavior.👍

UPDATE: After the initial publication of this blog, an official Belkin spokesperson reached out to the ZDI to confirm this bug is being fixed. They stated DirecTV/AT&T will be addressing this through WVB Firmware version 1.0.41. The firmware is rolling out…

Yara Sweeper for Incident Response

This blogpost is actually a tribute to Matt Graeber’s request from twitter. Since I have learned so much stuff from that guy, I take these sort of request really seriously.   In my post …

Detection Lab is a collection of Packer and Vagrant scripts that allow you to quickly bring a Windows Active Directory online, complete…

This post is also available in: 日本語 (Japanese)

Lately I’ve had to deal with setups which had transparent full disk encryption and were pretty hardened. If you are wondering what ‘transparent full disk encryption’  means, that&…

Dentro de un galpón en la calle 35 entre carreras 20 y 21, en el centro de Barquisimeto, una comisión del Servicio de Investigaciones Penales del Cuerpo de