Using #qb_triton, #IDA Python and #Hexrays Decompiler to deobfuscate code - still lots to be done but starting getting readable results !

第51回 情報科学若手の会 若手特別講演 https://wakate.org/2018/07/28/51th-general/

The new DNS-over-TLS (DoT) and DNS-over-HTTPS (DoH) protocols are available for enabling end user's privacy and security given the fact t...

In previous three parts of "Remsec driver analysis" research I've tried to show, how Remsec (aka Cremes) Ring 0 code works and how it is loa...

Contribute to saaramar/35C3_Modern_Windows_Userspace_Exploitation development by creating an account on GitHub.

The U.S. has accused Kaspersky Lab of working with Russian spies. But sources say the company exposed a massive breach that U.S. authorities missed.

Update 2019/01/14: Crowdstrike asked me to share an official statement: “We appreciate you reporting this detection miss to us and allowing us to rapidly address this gap on January 11th. We do have a bug bounty program www.hackerone.com/crowdstrike or via…

Virtuailor - IDAPython tool for creating automatic C++ virtual tables in IDA Pro. https://t.co/3XgMMWRdtQ

Alguns meses atrás, escrevi sobre o ataque de DLL Side-Loading, mostrando um exemplo real envolvendo um binário legítimo e digitalmente…

An updated collection of resources targeting browser-exploitation. - m1ghtym0/browser-pwn

An attack tool designed to remotely disable CCTV camera streams (like in spy movies) - Ullaakut/camerattack

Exchange your privileges for Domain Admin privs by abusing Exchange - dirkjanm/PrivExchange

The Discretionary ACL Modification Project: Persistence Through Host-based Security Descriptor Modification - HarmJ0y/DAMP

A VBA implementation of the RunPE technique or how to bypass application whitelisting. - itm4n/VBA-RunPE