Back in March 2018, I embarked on an arguably pointless crusade to prove that the TrustedToAuthForDelegation attribute was meaningless, and that “protocol transition” can be achieved without it. I believed that security wise, once constrained delegation was…

Decompresses Windows Defender AV signatures for exploration purposes - ExpandDefenderSig.ps1

In this past semester, I was taking a cybersecurity class. Since our awesome professor believe in the concept that we learn by doing and…

One of the most difficult threats to detect is the insider threat, especially when related to the detection to fraud. Normally we detect…

Penetration tests guide based on OWASP including test cases, resources and examples. - Voorivex/pentest-guide

Welcome to the McAfee Blog, where we share posts about security solutions and products to keep you and your connected family safe online.

Get the [almost] full list of MAC addresses that were targeted in the ASUS breach, and share our pain in the short story of extracting them.

At PortSwigger, we regularly run pre-release builds of Burp Suite against an internal testbed of popular web applications to make sure it's behaving properly. Whilst doing this recently, Liam found a

A completely free, open source and online course about Reverse Engineering iOS Applications. - ivRodriguezCA/RE-iOS-Apps

Gource visualization of beef (https://github.com/beefproject/beef) [04-02-2019]. The Browser Exploitation Framework Project This visualization was generated ...

The Web Security Academy is a free online training center for web application security, brought to you by PortSwigger. Create an account to get started.

or rather: How I am able to hijack your autosuggestions in Google Search.

Ghidra is a software reverse engineering (SRE) framework - NationalSecurityAgency/ghidra

Fingerbank provides the most accurate and comprehensive network device fingerprinting technology.

Writeup and PoC for Xiaomi URL spoofing w/ SSL vulnerability or, CVE-2019-10875

Eternalblue-Doublepulsar without Metasploit or python - GitHub - sailay1996/eternal-pulsar: Eternalblue-Doublepulsar without Metasploit or python

Updated Katz.cs - Latest Mimikatz, I mean honestly it is 2018... - katz.cs