Long story short, I have created my Hackerone/Bugcrowd profiles a way back in 2016 but I have never reported a bug there. I have never…

A new phishing technique that displays a fake URL bar in Chrome for mobile. A key innovation is the "scroll jail" that traps the user in a fake browser.

  Nmap comes with NSE : a fully integrated scripting engine with many useful libraries. The http library is one I've come to use oftenbut I...

Popular Android threats in 2019. Contribute to sk3ptre/AndroidMalware_2019 development by creating an account on GitHub.

Introduction

A colleague encountered Oracle for the first time this week! Yes, you guessed it, they popped their Oracle DB Cherry! So attached is a…

Dynamic binary instrumentation tool designed for Android application and powered by Frida. It desassemble dex, analyze, can generate hook, stored intercepted data automatically and do new things fr...

Exploit for CVE-2019-9810 Firefox on Windows 64-bit. - 0vercl0k/CVE-2019-9810

Unless you have intentionally decided to block any news around software in your social feeds, it is likely that you have heard about Docker. I have written a few posts around Docker and how you can…

Web App bug hunting . Contribute to ghsec/webHunt development by creating an account on GitHub.

We’ve packed it, we’ve wrapped it, we’ve injected it and powershell’d it, and now we've settled on feeding it a memory dump, and still Mimikatz remains the tool of choice when extracting credentials from lsass on Windows systems. Of course this is due to…

CEPAT89 adalah situs slot online resmi yang menyediakan akses login & daftar mudah, layanan 24/7, transaksi cepat via Qris terbaik 2026.

Shellcoding utilities. Contribute to Mr-Un1k0d3r/Shellcoding development by creating an account on GitHub.

In this past semester, I was taking a cybersecurity class. Since our awesome professor believe in the concept that we learn by doing and…

There are many ways an attacker can gain Domain Admin rights in Active Directory. This post is meant to describe some of the more popular ones in current use. The techniques described here "assume breach" where an attacker already has a foothold on an internal…

Broadcom is one of the major vendors of wireless devices worldwide. Since these chips are so widespread they constitute a high value target to attackers and any vulnerability found in them should be considered to pose high risk. In this blog post I provide…