This past winter, I was fortunate to have the opportunity to work for Trail of Bits as a graduate student intern under the supervision of Peter Goodman and Artem Dinaburg. During my internship, I developed Dr. Disassembler, a Datalog-driven framework for…

Research by: Golan Cohen Introduction Last seen in August 2021, Zloader, a banking malware designed to steal user credentials and private information, is back with a simple yet sophisticated infection chain. Previous Zloader campaigns, which were seen in…

.NET executable to use when dealing with privilege escalation on Windows to gain local administrator access - notdodo/LocalAdminSharp

Strategically aged domain detection can capture domains registered by advanced persistent threats or likely to be used for network abuses.

Cybersecurity firm Halborn provides an in-depth guide on the practice of Red Teaming and why it's so important for your organization's safety.

Black Lotus Labs, the Lumen threat research team, uncovered a series of targeted actions against the Russian Ministry of Foreign Affairs.

Offensive cybersecurity blog topics on fuzzing, vulnerability research, EDRs, advanced offensive (red-team) tooling, reverse engineering & more.

Introduction In February 2021, the company Dbappsecurity discovered a sample in the wild that exploited a zero-day vulnerability on Windows 10 x64. The

Incident response case management, DFIR-IRIS and a bit of MISP - Koen Van Impe - vanimpe.eu - Incident response case management A good case management is indispensable for CSIRTs. There are a number of excellent case management tools available but

Mobile Edge-Dynamic Unified Security Analysis. Contribute to Ch0pin/medusa development by creating an account on GitHub.