How a €5 MT02 Wi-Fi repeater let me pop a root shell with nothing more than a cheeky SSID.

Deep dive into bind‐shell deployment, payload experiments, and a new ‘time_conf’ primitive for stealthy, persistent root access without reboot or UI lockup.

Technical blog by Stephan Berger (@malmoeb)

In this blog post, we document Linux process injection techniques, and explain how to detect and mitigate them.

Key takeaways  FIDO-based passkeys remain a highly recommended authentication method to protect against prevalent credential phishing and account takeover (ATO) threats. 

Red-Team LKM. Contribute to carloslack/KoviD development by creating an account on GitHub.

Reverse engineering is an integral part of malware analysis and research - get started learning this advanced skill to investigate malware.

Keeping track of companies that "care about your data 🥺" - zenfyrdev/bootloader-unlock-wall-of-shame

Learn about APT27’s capabilities, tools, targets, and motives. A deep dive into this Chinese state‑sponsored cyber‑espionage group’s tactics and malware.

Vulnerability Research on Low-Level Systems

Group Policy Objects manipulation and exploitation framework - synacktiv/GroupPolicyBackdoor

A new proof-of-concept tool named EDR-Freeze has been developed, capable of placing Endpoint Detection and Response (EDR) and antivirus solutions into a suspended "coma" state.

Doing Windows Runtime things from PowerShell.