Mimikatz: A utility known for dumping plain text credentials.

Very few people know that it can be used for dumping non-exportable certificates as .pfx and perform PTH attacks.

You can even use Mimikatz to set Windows password of a single character even if the GP set by admin is otherwise.

This github repository hosts a pdf book

https://github.com/ewhitehats/InvisiblePersistence/

XSS in PHP

https://www.exploit-db.com/exploits/45143

Linux Kernel - UDP Fragmentation Offset 'UFO' Privilege Escalation (Metasploit)

https://www.exploit-db.com/exploits/45147

Google project zero blog:

https://googleprojectzero.blogspot.com/

New research at #BlackHat2018

Attacking LTE network side this time

-- we will show how $ 200 hardware setup can be used remotely to kill a base station & change LTE network configurations.

This tiny hardware can be easily mounted on a drone.

https://twitter.com/raviborgaonkar

For malware research

https://blog.trendmicro.com/trendlabs-security-intelligence/tag/malware/