This article is about greybox fuzzing of userland targets that can be encountered in Android using AFL++ and its Frida mode. We also discuss how to target JNI functions, to test the native features invoked by Java code.

ChatGPT helps you get answers, find inspiration, and be more productive.

📌 [ 繁體中文 | English ] This is a side story/extra bug while I’m preparing for my Black Hat USA presentation. I believe most of the details have already been covered in the official advisory (sh

Becoming a Vulnerability Researcher roadmap: my personal experience - VR_roadmap.md

We explain what progressive web apps (PWAs) are and how they can be used in phishing to steal passwords and then hijack accounts.

Contribute to tykawaii98/CVE-2024-30088 development by creating an account on GitHub.

Overview

A Pwn2Own 2024 SpiderMonkey JIT Bug: From Integer Range Inconsistency to Bound Check Elimination then RCE - bjrjk/CVE-2024-29943

Exfiltrate sensitive user data from apps on Android 12 and 13 using CVE-2024-0044 vulnerability remotely - scs-labrat/android_autorooter

Leak of any user's NetNTLM hash. Fixed in KB5040434 - MzHmO/LeakedWallpaper

Apache OFBiz RCE Scanner & Exploit (CVE-2024-38856) - securelayer7/CVE-2024-38856_Scanner

TL;DR — Tens of millions of credentials obtained from info stealer logs populated by malware were posted to Telegram channels last month and used to shake down companies for bug bounties under the misrepresentation the data originated from their service.

A command and control framework written in rust. Contribute to Teach2Breach/Tempest development by creating an account on GitHub.

Contribute to Gl3bGl4z/All_NTLM_leak development by creating an account on GitHub.

Conference presentation slides. Contribute to onhexgroup/Conferences development by creating an account on GitHub.

SCCMSecrets.py aims at exploiting SCCM policies distribution for credentials harvesting, initial access and lateral movement. - synacktiv/SCCMSecrets