Wapiti allows you to audit the security of your websites or web applications. It performs “black-box” scans.

If you wanted to build a car from scratch, it would be smart to first know the different components of a car. Why should an investigation involving computers be any different? That is why Digital F…

We discuss our discoveries on ThiefQuest, such as the differences between the old and new versions of the malware, and why we believe ThiefQuest is an example of highly capable malware that should be kept under close monitoring.

Do you want to become a ninja for Microsoft Defender for Endpoint? We can help you get there! 

Back in April of this year, a researcher named tint0 submitted two bugs in IBM WebSphere to the ZDI program. One was an information disclosure vulnerability while the other could lead to remote code execution (RCE). This blog covers ZDI-20-689 /CVE-2020…

Services with elevated privileges typically were used in the past as method of privilege escalation or persistence. However a service could be utilized for lateral movement since local administrato…

On April 25, 2020, Sophos published a knowledge base article (KBA) 135412 which warned about a pre-authenticated SQL injection (SQLi) vulne...

While looking for new devices to perform reverse engineering on, I became interested in Bosch’s FlexiDome line of cameras, specifically the FlexiDome 7000, a day/night surveillance camera. This blog post demonstrates how I reverse engineered the firmware…

ohhhh boy, this a big one. https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11034 Good luck, teams!

My Personal Security Research

Bug hunting through fuzzer/*-sanitizer/etc... Contribute to hardenedlinux/harbian-qa development by creating an account on GitHub.

There’s no use talking about the problem unless you talk about the solution. Betty Williams This is a kick-off post for the series of post on The War Game pwnable.kr. It’s focused on Linux Exploitati

bddisasm is a fast, lightweight, x86/x64 instruction decoder. The project also features a fast, basic, x86/x64 instruction emulator, designed specifically to detect shellcode-like behavior. - bitd...

IoT Digital Forensics Course with hands-on labs. Contribute to RJC497/IoT-Digital-Forensics-Course development by creating an account on GitHub.

PCAP Samples for Different Post Exploitation Techniques - sbousseaden/PCAP-ATTACK

A few weeks ago, I was going over some of the research topics in my to-do list, and the one that sounded interesting to work on during 4th…

Volatility’s process listing plugin pslist lists all the process which were running in the system. The process is sorted with the start…