DDE stands for “Dynamic Data Exchange”, this is a method used by windows to facilitate one program being able to subscribe to an item made

A Javascript library for browser exploitation. Contribute to theori-io/pwnjs development by creating an account on GitHub.

A few days ago, the company Armis published a proof of concept (PoC) of a remote code execution vulnerability in Android via Bluetooth (CVE-2017-0781), known as BlueBorne. Although BlueBorne refers to a set of 8 vulnerabilities, this PoC uses only 2 of them…

Signed-off-by: Scott Bauer

Some neat tricks to bypass CSRF-protection from #ZeroNights https://t.co/6sD580hSMq

A collection of pentest tools and resources targeting Hadoop environments - wavestone-cdt/hadoop-attack-library

Empire HTTP(S) C2 redirector setup script. Contribute to V1V1/Sleight development by creating an account on GitHub.

Tarlogic Security's Red Team shows how to exploit the CVE-2017-11826 vulnerabilities that affected MS Office

Collection of PowerShell scripts. Contribute to Arno0x/PowerShellScripts development by creating an account on GitHub.

Patchwork is a cyberespionage group known for targeting diplomatic and government agencies that has since added businesses to their list of targets.

On 23 November, 2017, we reported two vulnerabilities to Exim. These bugs exist in the SMTP daemon and attackers do not need to be authenticated, including CVE-2017-16943 for a use-after-free (UAF) vulnerability, which leads to Remote Code Execution (RCE);…

Most JavaScript malware authors try to obfuscate their code by adding a lot of unused code as well as randomized variable names and simple encoding and decoding fucntions. Lastly, they typically re…

nmap-vulners is an Nmap NSE script using some well-known service to provide info on vulnerabilities. The only thing you should always keep in mind is that the script depends on having software versions at hand, so it only works with -sV flag.

Empire Cheat Sheet https://t.co/Np49CYHQJx

SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API. - codewatchorg/sqlipy

Proof-of-Concept exploits for CVE-2017-11882. Contribute to rxwx/CVE-2017-11882 development by creating an account on GitHub.

Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.