This article describes FAQs to tell users or IT Admins what to do if their existing VBA solution breaks.

Four 0-days that were detected as exploited in the wild are patched in today's Microsoft Patch Tuesday. CVE-2020-1027 - Win EoP CVE-2020-0938 - Adobe Font Manager CVE-2020-1020 - Adobe Font Manager CVE-2020-0968 - Scripting Engine

Learn all about how to fuzz network services in this practical case study by @nosoynadiemas in which he fuzzes 3 of the most popular Open Source FTP servers! https://t.co/KVUigUV1l9

PoC for CVE-2020-11713. Timing side-channel on wc_ecc_mulmod which allows to recover private key used to sign messages. - wolfssl_4.3.0_ecc_mulmod_poc.c

Introduction In this post I'm going to try to explain a new obfuscation technique I've come up with (at least I have not seen it before, pl...

Specifies the three variants of the Xpress Compression Algorithm: LZ77+Huffman, Plain LZ77, LZNT1, and their respective decompression algorithms.

The majority of exploitation in the wild occurs before patch issuance or within a few days of a patch becoming available.

Introduction

convert EXE to DLL walk through and example. How to convert a .exe file to a .dll to be able to call arbitrary functions with controlled data. Useful for fuzzing and reverse engineering.

CVE-2019-17424 Stack Overflow Vulnerability detailed write-up and exploit walk through for beginner and intermediate learners with ASLR and DEP bypass.

In this technical guide, ForAllSecure Researcher, Guido Vranken walks readers through his workflow for uncovering for OpenWRT remote code execution vulnerability.

I recently came up against my first split APK during an Android app security assessment. My usual toolkit doesn’t support split APKs, so I hacked together a solution to allow me to instrument…

[CPR-Zero] CVE-2020-0791 (Windows 10 Kernel): Out-Of-Bounds Read\Write in the StrechBlt function in win32kfull.sys https://t.co/PGg9X2bNHE

My writeup for the haproxy http2 bug (CVE-2020-11100) is now public: https://t.co/rWgz4bfnCZ. Includes a PoC exploit to demonstrate RCE against Ubuntu 19.10.

After the Emotet Incident at Heise, where ERNW has been consulted for Incident Response, we decided to start a blogpost series, in which we want to regularly report on current attacks that we observe. In particular we want to provide details about the utilized…

The iPhone is one of the most popular smartphone devices. Thanks to its huge popularity, the iPhone gets a lot of attention from the forensic community. Multiple acquisition methods exist, allowing forensic users to obtain more or less information with more…

Posted by hugeh0ge, Ricerca Security NOTE: We have decided to make our PoC exclusively available to our customers to avoid abuse by scr...

"If succesfuly exploited, an attacker within NFC range could obtain remote code execution on android device's NFC daemon." https://t.co/T24r3qWNnF

win32k use-after-free poc. Contribute to james0x40/CVE-2020-0624 development by creating an account on GitHub.