Diaphora, the most advanced Free and Open Source program diffing tool. - joxeankoret/diaphora

Abstract Once threat actors gain a foothold on a system, they must implement techniques to maintain that access, even in the event of restarts, updates in credentials or any other type of change...

Now that you know how to make a Linux kernel module that can hook any exposed function in kernel memory (Part 1 and Part 2), let’s get down to writing a hook that does something interesting!
In this first example, we’re going to make a rootkit that intercepts…

How to set secure Docker enviroment and reduce risk for Docker attacks

Kimsuky is the most active cyber threat actor who consistently targets North Korean-related institutions, companies, media, academia, and…

Akamai researchers uncover and reverse engineer a new Go-based DDoS botnet.

Arbitrary file write (AFW) vulnerabilities in web application uploads can be a powerful tool for an attacker, potentially allowing them to escalate their privileges and even achieve remote code execution (RCE) on the server. However, the specific tactics…

CLI utilities to facilate system monitoring and malware analysis.

Drag and Drop Multiple File Uploader PRO - Contact Form 7 v5.0.6.1 Path Traversal (CVE-2023-1112) - Nickguitar/Drag-and-Drop-Multiple-File-Uploader-PRO-Path-Traversal

A breakdown of a bug SEFCOM T0 and I exploited to achieve a WAN-side RCE in some Netgear RAX routers for pwn2own 2022. The bug is a remotely accessible comma...

Author: Knownsec 404 Team
中文版：https://paper.seebug.org/2053/

The @CryptoHack__ account was pinged today by ENOENT, with a CTF-like challenge found in the wild: Source tweet. Here’s a write-up covering how given a partially redacted PEM, the whole private key can be recovered.