Certificate pinning (“cert pinning” for short) is a technique used for mobile applications to add an extra layer of protection to secure communications. Some people additionally use the…

Cisco Talos researchers write how the Tor2Mine cryptomining group has returned and is now using RATs and information stealing trojans https://t.co/O52MPTz3fP

Nt!NtRaiseHardError Two CSRSS.EXE Information Disclosure Bugs

We release Connected papers to the public! Enter a paper of interest and we will generate a graph that shows that section of paper-space…

New binutils: objdump --visualize-jumps

Just finished my first blog post on a AMSI bypass technique utilizing function hooking as well as dll injection https://t.co/WsvbHzEQtx

WinDivert is a user-mode packet interception library for Windows 7, Windows 8 and Windows 10. It enables user-mode capturing/modifying/dropping of network packets sent to/from the Windows network stack. https://t.co/jKBk8elUhj #tools #pentest #packets #windows

We just published a blog and accompanying exploit for a Netgear pre-auth RCE vulnerability in 79 devices and 758 firmware images that existed since 2007. Don't you just love 1996 a style exploit dev, no pesky stack cookies/PIE. https://t.co/FmmmtWWlkM ht…

if you're not familiar with the term "defensive programming" here's an example

Our latest publication is out! We extended HookTracer, which is our @volatility & @unicorn_engine framework, in order to automatically emulate+analyze message hooks to determine if they are malicious or benign: https://t.co/JHGkC0QqIb @nolaforensix @ryandmaggio…

Pwn BlueFrag: CVE-2020-0022 RCE Exploit For Android 8.0-9.0, many thanks to https://t.co/oqKLq9X265. Debugging all details step by step with GDB is so much fun.

Antonio shares findings and tips from his research on socket-based fuzzing. Let’s start with the audit of three widely-used FTP servers, with details on interesting CVEs found along the way.

Using Frida For Windows Reverse Engineering https://t.co/Dyt9vPckVp

Big Threats Using Code Similarity. Part 1 Today, we are announcing the release of KTAE, the Kaspersky Threat Attribution Engine. This code attribution technology, developed initially for internal use by the Kaspersky Global Research and Analysis Team,

A repository of my completed writeups, along with the samples themselves. - itsKindred/malware-analysis-writeups

This post is the final part in a series about my experiences attacking FreeIPA. In Part I of this series, we reviewed some of the…

Amnesty investigation of contact tracing apps from Europe, Middle East and North Africa finds several are dangerous for human rights.