Specifies the three variants of the Xpress Compression Algorithm: LZ77+Huffman, Plain LZ77, LZNT1, and their respective decompression algorithms.

The majority of exploitation in the wild occurs before patch issuance or within a few days of a patch becoming available.

Introduction

convert EXE to DLL walk through and example. How to convert a .exe file to a .dll to be able to call arbitrary functions with controlled data. Useful for fuzzing and reverse engineering.

CVE-2019-17424 Stack Overflow Vulnerability detailed write-up and exploit walk through for beginner and intermediate learners with ASLR and DEP bypass.

In this technical guide, ForAllSecure Researcher, Guido Vranken walks readers through his workflow for uncovering for OpenWRT remote code execution vulnerability.

I recently came up against my first split APK during an Android app security assessment. My usual toolkit doesn’t support split APKs, so I hacked together a solution to allow me to instrument…

[CPR-Zero] CVE-2020-0791 (Windows 10 Kernel): Out-Of-Bounds Read\Write in the StrechBlt function in win32kfull.sys https://t.co/PGg9X2bNHE

My writeup for the haproxy http2 bug (CVE-2020-11100) is now public: https://t.co/rWgz4bfnCZ. Includes a PoC exploit to demonstrate RCE against Ubuntu 19.10.

After the Emotet Incident at Heise, where ERNW has been consulted for Incident Response, we decided to start a blogpost series, in which we want to regularly report on current attacks that we observe. In particular we want to provide details about the utilized…

The iPhone is one of the most popular smartphone devices. Thanks to its huge popularity, the iPhone gets a lot of attention from the forensic community. Multiple acquisition methods exist, allowing forensic users to obtain more or less information with more…

Posted by hugeh0ge, Ricerca Security NOTE: We have decided to make our PoC exclusively available to our customers to avoid abuse by scr...

"If succesfuly exploited, an attacker within NFC range could obtain remote code execution on android device's NFC daemon." https://t.co/T24r3qWNnF

win32k use-after-free poc. Contribute to james0x40/CVE-2020-0624 development by creating an account on GitHub.

started as a a fun way to take notes ... 16 mindmaps so far :) https://t.co/1VA1OUBzQ5

Background

Whenever a “new” DLL hijacking / planting trick is posted on Twitter, it generates a lot of comments. “It’s not a vulnerability!” or “There is a lot of hijackable DLLs on Windows…” are the most common reactions. Though, people often don’t really speak about…