Chrome extensions have over 1.2 billion installs. Not many people have actually reviewed the authenticity and risk associated with the chrome extensions they use. This blog post describes some of the tools and techniques that can be used to review chrome…

The Malware Lake Project Finding a golden nugget in a lake full of trash For a while I was wondering, where am I going to find interesting malware? I have these huge sources of unorganized data: Malshare, VirusTotal, VirusShare, Malware Bazaar and AnyRun…

Introduction video for the intro to reversing challenges of CSCG 2020: https://www.cscg.de/cscg/teilnehmen/

Challenge intro_rev/rev1: https://earth.2020.cscg.de/tasks/Intro%20to%20Reversing%201

Binary Exploitation playlist (contains videos about reversing…

Shodan Command-line in this article and video, I show you the benefit of using the Shodan command line. From Vulnerability to port scanning.

🔬 A minimalist tool which can be used to give information about your portable executable. - backslash/MicroscoPE

PHP Shell : https://raw.githubusercontent.com/pentestmonkey/php-reverse-shell/master/php-reverse-shell.php Download Link : https://www.vulnhub.com/entry/esca...

The feature has been in development for nearly a year.

Edit: The original data for RDP in March, 2020 included IPv6 results whereas the historical analysis only looked at IPv4. I've changed the numbers to reflect the new counts. Tl;dr: we're still seeing growth but significantly less than before. More companies…

Just another DFIR Blog

IoTGoat is a deliberately insecure firmware created to educate software developers and security professionals with testing commonly found vulnerabilities in IoT devices. - OWASP/IoTGoat

Yara scanner that uses PsExec, CrowdResponse and native OS commands to scan remote hosts simultaneously. - GitHub - tsale/yara_scanner: Yara scanner that uses PsExec, CrowdResponse and native OS c...

Frequently in malware investigations, we come across shellcode used after exploiting a vulnerability or being injected into a process. In this webcast, we'll look at some of the tools and techniques the malware analyst can use to start investigating what…

Contribute to dmaasland/mcafee-config-decrypt development by creating an account on GitHub.

This is a guide for building and configuring a vulnerable virtual Active Directory lab by hand.

The Recon incident response team recently worked an intrusion case involving a ManageEngine Desktop Central server that was affected by CVE-2020-10189.