Patchwork is a cyberespionage group known for targeting diplomatic and government agencies that has since added businesses to their list of targets.

On 23 November, 2017, we reported two vulnerabilities to Exim. These bugs exist in the SMTP daemon and attackers do not need to be authenticated, including CVE-2017-16943 for a use-after-free (UAF) vulnerability, which leads to Remote Code Execution (RCE);…

Most JavaScript malware authors try to obfuscate their code by adding a lot of unused code as well as randomized variable names and simple encoding and decoding fucntions. Lastly, they typically re…

nmap-vulners is an Nmap NSE script using some well-known service to provide info on vulnerabilities. The only thing you should always keep in mind is that the script depends on having software versions at hand, so it only works with -sV flag.

Empire Cheat Sheet https://t.co/Np49CYHQJx

SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API. - codewatchorg/sqlipy

Proof-of-Concept exploits for CVE-2017-11882. Contribute to rxwx/CVE-2017-11882 development by creating an account on GitHub.

Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.

Hello #Firefox, this is #Meltdown. And these are your passwords. Figures from the #Meltdown paper - see https://t.co/RPiT6M8Xv2 and https://t.co/wtyTUEBLJq /cc @misc0110 @mlqxyz @yuvalyarom @stefanmangard #kpti #kaiser #intelbug

Cisco IOS SNMP RCE PoC. Contribute to artkond/cisco-snmp-rce development by creating an account on GitHub.

Meltdown PoC for reading passwords from Google Chrome. - GitHub - RealJTG/Meltdown: Meltdown PoC for reading passwords from Google Chrome.

5 lines of JavaScript broke every single Intel processor made in the past 15 years.

During malware analysis we often see attackers using features in creative ways to deliver and obfuscate malware. We’ve recently seen an increase with samples leveraging RTF temp files as a delivery method to encapsulate and drop malware. The attack uses the…

What if websites borrowed compute resources from their visitor’s devices while they browsed as a means of distributed computing?

A non-admin user in macOS High Sierra can approve a kernel module to be loaded with a single click, without providing their own or an administrator's credentials. Is this expected behavior?

Posted by Mayank Jain and Scott Roberts, Android security team [Cross-posted from the Android Developers Blog ] In June 2017, the Androi...

Learn Burp Suite payloads for web app security testing and vulnerability scanning with tips and techniques now easily available.

Recently, I reviewed several Web frameworks and language implementations, and found some vulnerabilities. This is an simple and interesting case, and seems easy to exploit in real world! AffectedA

Exploitation Framework for Embedded Devices. Contribute to threat9/routersploit development by creating an account on GitHub.