It was a weird and smoky afternoon in San Francisco. My downstairs neighbors had apparently never heard of vaporizers, and the Sierra Nevada was on fire. I had planned to spend the rest of the day attacking the user-location features of popular dating apps.…

Motivation Diving straight into reverse-engineering iOS apps can be daunting and time-consuming. While wading into the binary can pay of...

Credentials gathering tool automating remote procdump and parse of lsass process. - aas-n/spraykatz

Extract credentials from lsass remotely. Contribute to Hackndo/lsassy development by creating an account on GitHub.

Contribute to masahiro331/CVE-2019-10758 development by creating an account on GitHub.

A bug chain of HTTP Request Smuggling that led to account takeover

For clarity and brevity, the code referenced below has been distilled to simplest form.  The complete versions which were actually used for...

A list of resources for those interested in getting started in bug bounties - nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters

An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it. - vaib25vicky/a...

In this post, I’m going to reveal the fastest, easiest P1 that I’ve ever reported – multiple times! It’s the sort of oversight that seems so simple to avoid, but surprisingl…

We demonstrate how one can recover mt_rand()'s seed with only two outputs and without any bruteforce.

We found malicious apps that work together to compromise devices and collect user data. One of the apps, called Camero, exploits CVE-2019-2215, a flaw that exists in Binder. This is the first instance in the wild that exploits said UAF vulnerability.

The following post is a reproduction of a paper of mine which was included in the In Depth Security Vol. III book which is compiled by the…

Alternative ways to retrieve table names in MySQL — without information_schema.

Below are some simple methods for exiting vim. Contribute to hakluke/how-to-exit-vim development by creating an account on GitHub.

And Credit Card Number Too

Before I began to comprehend the complex science of information security, it seemed to me that Two-Factor Authentication is a guaranteed…

Recently I solved a CTF style challenge where the user was given an .apk file with the goal to find the flag. It turned out that it was a…