In previous three parts of "Remsec driver analysis" research I've tried to show, how Remsec (aka Cremes) Ring 0 code works and how it is loa...

Contribute to saaramar/35C3_Modern_Windows_Userspace_Exploitation development by creating an account on GitHub.

The U.S. has accused Kaspersky Lab of working with Russian spies. But sources say the company exposed a massive breach that U.S. authorities missed.

Update 2019/01/14: Crowdstrike asked me to share an official statement: “We appreciate you reporting this detection miss to us and allowing us to rapidly address this gap on January 11th. We do have a bug bounty program www.hackerone.com/crowdstrike or via…

Virtuailor - IDAPython tool for creating automatic C++ virtual tables in IDA Pro. https://t.co/3XgMMWRdtQ

Alguns meses atrás, escrevi sobre o ataque de DLL Side-Loading, mostrando um exemplo real envolvendo um binário legítimo e digitalmente…

An updated collection of resources targeting browser-exploitation. - m1ghtym0/browser-pwn

An attack tool designed to remotely disable CCTV camera streams (like in spy movies) - Ullaakut/camerattack

Exchange your privileges for Domain Admin privs by abusing Exchange - dirkjanm/PrivExchange

The Discretionary ACL Modification Project: Persistence Through Host-based Security Descriptor Modification - HarmJ0y/DAMP

A VBA implementation of the RunPE technique or how to bypass application whitelisting. - itm4n/VBA-RunPE

In Cobalt Strike 3.13, the argue command was introduced as a way of taking advantage of argument spoofing. I was first made aware of the concept while watching Will Burgess's awesome talk RedTeaming in the EDR Age, with Will crediting Casey Smith who presented…

Set of tests for fuzzing engines. Contribute to google/fuzzer-test-suite development by creating an account on GitHub.