Live Every Tuesday, Saturday, Sunday on Twitch.tv/nahamsec

Talks:
00:03:00 - NahamSec and @TheCyberMentor - Opening Ceremony:
00:15:00 - @STOKfredrik - From NOOB to MVH: What does it really take
00:58:00 - @niden - Try Harder? Keep Trying! Demystifying…

A Fast and Reliable service that enables you to extract IOCs and intelligence from different data sources.

Hex-Rays is about to come up with a solution that answers the RE community's needs. We will tell you more soon: https://t.co/IvnjER6d4T

It was the middle of last year that we detected the start of mass attacks by the xHelper Trojan on Android smartphones, but even now the malware remains as active as ever.

Cybercriminals are using ransomware to hold hospitals and medical services digitally hostage; preventing them from accessing vital files and systems until a ransom is paid.

Evade sysmon and windows event logging. Contribute to bats3c/Ghost-In-The-Logs development by creating an account on GitHub.

During the Pwn2Own Tokyo competition last fall, Pedro Ribeiro (@pedrib1337) and Radek Domanski (@RabbitPro) used a command injection vulnerability as a part of the exploit chain they used to gain code execution on a TP-Link Archer A7 wireless router…

SUBSCRIBE TO THE CHANNEL FOR MORE VIDEOS! JOIN WITH US IN THIS TELEGRAM GROUP SO IT WILL BE EASY FOR YOU TO SHARE YOUR KNOWLEDGE, DISCUSS YOUR IDEAS AND ISSU...

by Christopher Domas

In x86, beyond ring 0 lie the more privileged realms of execution, where our code is invisible to AV, we have unfettered access to hardware, and can trivially preempt and modify the OS. The architecture has heaped layers upon layers…

I’ve been a huge fan of MITREs ATT&CK framework ever since it’s release. It has been of enormous value to the whole InfoSec community and…

This workshop will cover macOS Mach-O executable header parsing, compiling Go dylibs, entrypoint manipulation, shellcode, and dynamically loading dylibs into memory.

Finding SSRF on app hosted on AWS EC2 allows for data theft from AWS account. Capital One lost 100M+ bank records due to an issue like…

Learning a new skill is fun, especially one that could land you a new job. We don’t think you’ll find too much demand for PDP-11 assembly language programmers, but if it still interests…

A guide of how to make the most of GNU Binutils and other tools to examine ELFs

The Magic in Hacking While wandering around the various amazing topics in this forum, I noticed a lack of one of the subjects I enjoy the most - exploit development (last post was more than a month ago). I decided to write my own post about the subject which…

Password managers such as LastPass are designed from the ground up to withstand brute-force attacks on the password database. Using encryption and thousands of hash iterations, the protection is made to slow down access to the encrypted vault that contains…