teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks. - teler-s...

A comprehensive analysis of the year's new malware

In most of the write-ups of CTF, reverse engineering concepts are taken for granted. This is a problem for newcomers that are unfamiliar with some basic concepts or don’t have prior experience in this field. However, this will be different. In this video…

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWA...

VBScript & VBA source-to-source deobfuscator with partial-evaluation - airbus-cert/vbSparkle

The GHDB is an index of search queries (we call them dorks) used to find publicly available information, intended for pentesters and security researchers. - readloud/Google-Hacking-Database

Introduction Last year, I published an article on mapping detection to the MITRE ATT&CK framework using DeTT&CT. In the article, we introduced DeTT&CT and explored its features and usag…

In this post, we are going to take a look at Redline Stealer, a well-known .NET based credential stealer. I will focus on unpacking the managed payload and extracting it’s config, for a more detailed analysis of the payload you can check out this post by…

Basic POC exploit for CVE-2022-46164. Contribute to stephenbradshaw/CVE-2022-46164-poc development by creating an account on GitHub.

By: Andrew Rathbun and Lucas Gonzalez Background In the last week of December 2022, on the Digital Forensics Discord Server, some discussion was brought up by a member in the #computer-forensics channel asking if anyone knew a Windows 11 folder path of interest…