Contribute to 1N73LL1G3NC3x/Nightmangle development by creating an account on GitHub.

Contribute to hackvens/CoercedPotato development by creating an account on GitHub.

CVE-2023-22515: Confluence Broken Access Control Exploit - Chocapikk/CVE-2023-22515

A repository of telemetry domains and URLs used by mobile location tracking, user profiling, targeted marketing and aggressive ads libraries. - craiu/mobiletrackers

In this post I describe a somewhat unique Android kernel exploit, which utilizes the TrustZone in order to compromise the kernel.

Disengaging Loader Lock to do anything directly from DLLMain...

Microsoft addressed our LocalPotato vulnerability in the SMB scenario with CVE-2023-21746 during the January 2023 Patch Tuesday. However, the HTTP scenario remains unpatched, as per Microsoft&#8217…

What is NTLM? What common attacks exist against it? NTLM is an extremely deprecated authentication protocol introduced by Microsoft in 1993. It is a challenge-response protocol: the server keeps a secret called an “NTLM hash” derived from the user’s password…

Contribute to nathan31337/Splunk-RCE-poc development by creating an account on GitHub.

Proof-of-concept (PoC) exploit code has been published for a Microsoft Exchange Server vulnerability tracked as CVE-2023-36745

VSS Hardware Hacking Wiki and Blog Entries

(S6:E57) Secret Handshake A Mutual TLS Based C2 Communication Channel - John Conwell - CypherCon 6.0 - Wisconsin

Secret Handshake A Mutual TLS Based C2 Communication Channel

One of the goals of malware command & control (C2) communication is to blend into…

In this series of posts, I will try to cover all the common knowledge you would need to create your PE bin2bin obfuscator. This year I saw a rise of interest in the topics of software obfuscation and deobfuscation, yet I didn’t see any new open-source projects…

Manual identification, decryption and fixing of encrypted strings using Ghidra and x32dbg.

0x00 前言

As part of my disaster recovery plan, I want to have offline backup of 2FA codes for online banking to generate OTPs without my phone in case of emergency. This required reverse engineering my bank’s Android OTP application, that I expected would reveal some…

Conference presentation slides. Contribute to onhexgroup/Conferences development by creating an account on GitHub.

PoC Exploit for VM2 Sandbox Escape Vulnerability. Contribute to rvizx/CVE-2023-30547 development by creating an account on GitHub.

Buy redteamrecipe.com for 195 on GoDaddy via ExpiredDomains.com. This premium expired .com domain is ideal for establishing a strong online identity.