Malware research developed at Spark 1 Cybersecurity Solutions.

What if you had to study a single page to get the complete idea language? Today, we are sharing "The Entire Python Language in a Single Image"

This month's updates have started rolling out earlier today.

Two more CVEs. EoP and Null Page allocation, both in Ntoskrnl.exe. Working on blogposts.

CVE-2019-1458 : Win32k Elevation of Privilege Vulnerability Patch Diffing to PoC Tutorial https://t.co/BbjaPAEOX2 #PatchDiffing #win32k

New blog post: Dumping the VEH in Windows 10 https://t.co/7YUv9bS6rc

I've compiled a summary of every original public iOS kernel exploit from app context since iOS 10, describing the high-level exploit flow to get stable kernel read/write. The trends of how these exploits have evolved over time are quite interesting: http…

Certificate pinning (“cert pinning” for short) is a technique used for mobile applications to add an extra layer of protection to secure communications. Some people additionally use the…

Cisco Talos researchers write how the Tor2Mine cryptomining group has returned and is now using RATs and information stealing trojans https://t.co/O52MPTz3fP

Nt!NtRaiseHardError Two CSRSS.EXE Information Disclosure Bugs

We release Connected papers to the public! Enter a paper of interest and we will generate a graph that shows that section of paper-space…

New binutils: objdump --visualize-jumps

Just finished my first blog post on a AMSI bypass technique utilizing function hooking as well as dll injection https://t.co/WsvbHzEQtx

WinDivert is a user-mode packet interception library for Windows 7, Windows 8 and Windows 10. It enables user-mode capturing/modifying/dropping of network packets sent to/from the Windows network stack. https://t.co/jKBk8elUhj #tools #pentest #packets #windows

We just published a blog and accompanying exploit for a Netgear pre-auth RCE vulnerability in 79 devices and 758 firmware images that existed since 2007. Don't you just love 1996 a style exploit dev, no pesky stack cookies/PIE. https://t.co/FmmmtWWlkM ht…

if you're not familiar with the term "defensive programming" here's an example

Our latest publication is out! We extended HookTracer, which is our @volatility & @unicorn_engine framework, in order to automatically emulate+analyze message hooks to determine if they are malicious or benign: https://t.co/JHGkC0QqIb @nolaforensix @ryandmaggio…

Pwn BlueFrag: CVE-2020-0022 RCE Exploit For Android 8.0-9.0, many thanks to https://t.co/oqKLq9X265. Debugging all details step by step with GDB is so much fun.