A non-admin user in macOS High Sierra can approve a kernel module to be loaded with a single click, without providing their own or an administrator's credentials. Is this expected behavior?

Posted by Mayank Jain and Scott Roberts, Android security team [Cross-posted from the Android Developers Blog ] In June 2017, the Androi...

Learn Burp Suite payloads for web app security testing and vulnerability scanning with tips and techniques now easily available.

Recently, I reviewed several Web frameworks and language implementations, and found some vulnerabilities. This is an simple and interesting case, and seems easy to exploit in real world! AffectedA

Exploitation Framework for Embedded Devices. Contribute to threat9/routersploit development by creating an account on GitHub.

The Journey to the New and Improved Ten Most Critical Web Application Security Risks

"Be a hacker not a criminal"... Pentester | IT enthusiastic | blogger - r00t-3xp10it

XSS is a very commonly exploited vulnerability type which is very widely spread. Here we are going to see about most important XSS Cheat sheet.

A PowerShell script for helping to find vulnerable settings in AD Group Policy. (deprecated, use Grouper2 instead!) - l0ss/Grouper

Let me open this with a few questions Do you have your own penetration testing lab? Have you installed Windows Server 2016 before? Do you have Active Directory at home? What version of PowerShell a…

Explore four techniques to bypass SSL certificate checks on Android in our Four Ways to Bypass Android SSL Verification and Certificate Pinning blog.

TL;DR: You can achieve DDE execution with Excel SpreadSheets embedded within OneNote. This bypasses the original Excel mitigation ruleset…

Halcyon IDE, An IDE for Nmap Script Development, Nmap Script Engine, NSE, Integrated Development Environment, Nmap, Network Mapping, Network Security, Port scanning, Script Development, IDE

Perform advanced MiTM attacks on websites with ease.

On the 19th of October, 2017, the world of IoT shuddered, facing a new enemy – a huge botnet that would be later called Reaper. Reaper is grim and is by far grimmer than the notorious Mirai botnet. According to the data provided by 360 Netlab, it has already…

Privilege escalation always comes down to proper enumeration. But to accomplish proper enumeration you need to know what to check and look for. This takes familiarity with systems that normally comes along with experience. At first privilege escalation can…