Modern web applications frequently contain volatile content, where the "same" location or function will return responses that differ substantially on different occasions, not (necessarily) as the resu

Bash post exploitation toolkit. Contribute to redcode-labs/Bashark development by creating an account on GitHub.

An Amnesty International staff member has been targeted by a sophisticated surveillance campaign, in what the organization suspects was a deliberate attempt to spy on its staff by a government hostile to its work.

Facebook on Monday announced the open source availability of Fizz, a TLS library written in C++ 14 that includes the new generation of Transport Layer Security (TLS 1.3).

Most usable tools for iOS penetration testing. Contribute to ansjdnakjdnajkd/iOS development by creating an account on GitHub.

A better security model exists. Instead of relying on IP and MAC addresses to determine access we can cryptographically authenticate the identity of people and software making requests. It’s a simple concept, really: what matters is who or what is making…

Explore this post and more from the netsec community

This video shows our micropatch for CVE-2018-12815 (memory corruption in Adobe Reader DC) in action. As always with 0patch, there is no need to restart the computer to get the (micro)patch applied.

Mimikatz is playing a vital role in every internal penetration test or red team engagement mainly for its capability to extract passwords…

Learn to capture NTLM hashes: SMB relay, LLMNR poisoning, WPAD spoofing, and other network-based attack techniques.

Imagine breaking into an IT-system by just inserting a manipulated smartcard.