In January 2019, I discovered a privilege escalation vulnerability in default installations of Ubuntu Linux. This was due to a bug in the snapd API, a default service. Any local user could exploit this vulnerability to obtain immediate root access to the…

Contribute to rasta-mouse/CookieMonster development by creating an account on GitHub.

Hello community, today I would like to share with you my most critical bug that I found in Facebook so far, so let’s get started :)

This tutorial explains how Pass the Hash attacks work, and how to detect, mitigate and respond to them.

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics. - tanprathan/MobileApp-Pentest-Chea...

This week, CYBER speaks to Shane Huntley, the Director of Google's Threat Analysis Group (TAG), essentially Google's hacker hunting team.

XSS, cross site scripting, javascript injection, clientside, RCE, 0day, 1day

I wrote a module for patator to brute-force AD credentials via Microsoft RD Gateway

Original text Introduction The last post discussed some of the problems when writing a payload for process injection. The purpose of this post is to discuss deploying the payload into the memo…

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs - Tuhinshubhra/CMSeeK

Notes taken from Google Machine Learning Course provided to public for practice & correction. - AntonioErdeljac/Google-Machine-Learning-Course-Notes

(CVE-2018-8495) Chaining small bugs together to achieve RCE