The APT28 group (aka Fancy Bear, Pawn Storm, Sednit, Sofacy, and Strontium) active since 2007 and they involved in various attacks.

SAML Pentest and Implementaion demonstrates how insecure configurations combine to form a phishing attack that can give attackers access.

Hola, this is Renwa from Kurdistan i’m glad to write my first write-up about infosec and Bugbounties.

List of XSS Vectors/Payloads . Contribute to RenwaX23/XSS-Payloads development by creating an account on GitHub.

Zero login essentially refers to the idea that we will never again have to recall complex passwords or provide documentation to identify ourselves.

Convinced from spending hours reading rave reviews, Bob eagerly clicked “Proceed to Checkout” for his gallon of Tuscan Whole Milk and…

Posted by lilsamuel1 - 6 votes and 12 comments

IDA Python Script to Get All function names from Event Constructor (VCL) - Coldzer0/IDA-For-Delphi

In late April we found and wrote a description of CVE-2018-8174, a new zero-day vulnerability for Internet Explorer that uses a well-known technique from the PoC exploit CVE-2014-6332. But whereas CVE-2014-6332 was aimed at integer overflow exploitation for…

Many people approach me asking more or less the same questions: how to start RE, how to become a malware analyst, how did I start, what materials I can recommend, etc. So, in this section I will co…

Golang has a fantastic multi-threading API which allows for all sorts of opportunities for building high performance tools, including one…

PowerShell module to check if a Windows binary (EXE/DLL) has been compiled with ASLR, DEP, SafeSEH, StrongNaming, and Authenticode. - NetSPI/PESecurity

Hawkeye Keylogger is an info-stealing malware that’s being sold as malware-as-a-service. Over the years, the malware authors behind Hawkeye have improved the malware service, adding new capabilities and techniques.