This is a collection of legal wording and documentation used for physical security assessments. The goal is to hopefully allow this as a template for other companies to use and to protect themselve...

Brian King // On a recent webapp test, I got a little frustrated with all the extra HTTP requests showing up in my Burpsuite Proxy History from connections that Firefox was making on its own. I was having to scroll around way more than I used to while trying…

An attack primer on how to hack into RMI based JMX services

25 Hour Practice Ethical Hacking Course:
https://www.udemy.com/course/practical-ethical-hacking/?referralCode=4A7D5EE973AFBCAD11C6
90% Discount Code (valid through 2019): THECYBERMENTOR

GitHub repo (for homework): https://github.com/hmaverickadams/Beginner…

PowerShell wrapper around Python for .NET to invoke Python from PowerShell - adamdriscoll/snek

Tired of proving you're not a robot? In this post, I'll show how you can partially bypass Google reCAPTCHA by using a new Turbo Intruder feature to trigger a race condition. This vulnerability was rep

Unit 42 researchers share details on a severe Docker container breakout vulnerability and outline a proof-of-concept that demonstrates how it can be exploited if a container has been compromised by a previous attack.

Automation for internal Windows Penetrationtest / AD-Security - S3cur3Th1sSh1t/WinPwn

A fast Rust-based safe and thead-friendly grammar-based fuzz generator - gamozolabs/fzero_fuzzer

As the cybersecurity industry moves from the traditional network vulnerability assessment services to replicating attacks from advanced…

Posted by Maddie Stone, Project Zero Introduction On October 3, 2019, we disclosed issue 1942 (CVE-2019-2215), which is a use-afte...

Just recently I stumbled over a Twitter poll created by Andrew Thompson asking if defenders (blue team) should show the simulated…

As the pace of life accelerates, we spend less time waiting or in downtime.  Kubernetes offers something similar for our life with technology. It is a container orchestration platform that offers an easy, automated way...

Python automation of Docker.sock abuse. Contribute to AbsoZed/DockerPwn.py development by creating an account on GitHub.

TL;DR: Mimblewimble’s privacy is fundamentally flawed. Using only $60/week of AWS spend, I was able to uncover the exact addresses of…

A Potential Bypass Technique

OSS-Fuzz - continuous fuzzing of open source software. - google/oss-fuzz