Hello Everyone — Long time no see!

Ethan Robish // WebSockets Overview WebSockets is a technology to allow browsers and servers to establish a single TCP connection and then asynchronously communicate in either direction. This is great […]

Extract (links/possible endpoints) from responses & filter them via decoding/sorting - arbazkiraak/LinksDumper

I’ve been doing some crazy experiments on running an EXE as a DLL. Here are some parts of my research. Case #1 Let’s take a simple example like a MessageBox. [crayon-6005ebcab5257530159844/] After …

A cheatsheet with commands that can be used to perform kerberos attacks - kerberos_attacks_cheatsheet.md

Posted by Ian Beer, Project Zero Project Zero’s mission is to make 0-day hard. We often work with other companies to find and report se...

COM hijacking presents a unique way to load your rogue DLL into another process. In a post-PowerShell world with increasing optics into in-memory tactics, COM hijacking may provide an alternative t…

Open Source C++ Crypter. AES-256 Bit Encryption, Virtual Machine Detection and Almost FUD - Include-sys/hCrypt

Security teams can now generate macros in Atomic Red Team to test their ability to observe and detect emerging initial access techniques.

Executive Summary In May 2019, Microsoft released an out-of-band patch update for remote code execution vulnerability CVE-2019-0708, which is also known

Docker image for building ghidra RE framework from source - dukebarman/ghidra-builder

Posted by Ian Beer, Project Zero In the earlier posts we examined how the attackers gained unsandboxed code execution as root on iPhone...

Security Advisories. Contribute to jamesbercegay/advisories development by creating an account on GitHub.

Capture handshakes of nearby WiFi networks automatically - staz0t/hashcatch

Python / C# Unmanaged PowerShell based RAT . Contribute to Mr-Un1k0d3r/ThunderShell development by creating an account on GitHub.

Posted by Ian Beer, Project Zero Project Zero’s mission is to make 0-day hard. We often work with other companies to find and report se...

TLDR? Skip to the Final Comments.

The fastest and cross-platform subdomain enumerator, don't waste your time. - Edu4rdSHL/findomain

(0Day) Google Android v4l2 Double Free Privilege Escalation Vulnerability

Sysmon 10.4 has been released and this is one I particularly was looking forward to ever since the release of version 9, which introduced…