The vulnerability, codenamed “Bad Neighbor”, is a bug in the IPv6 Neighbor Discovery Protocol, particularly it’s improper handling of ICMPv6 Router Advertisement Packets. While publicly available proof of concept (PoC) code results in a denial of service…

Writeup of a hard RE challenge hosted by the National Cyber-Security Center of Hungary featuring PIE binary to SO lib transformation.

Explicit intents have a set receiver (the name of an app package and the class name of a handler component) and can be delivered only to a predetermined component (activity, receiver, service). With implicit intents, only certain

  by Mitja Kolsek, the 0patch Team   [Update 1/22/2021: This vulnerability did not get patched by December 2020 or January 2021 Extended Se...

Intro Defending an Active Directory environment, particularly a large one, is a daunting task. Telemetry generated by Active Directory itself as well as the hosts connected to it are critical…

Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to read or have already read - 0xricksanchez/paper_collection

Bugcrowd Founder Casey Ellis talks about COVID-19's impact on bug bounty hunters, bug bounty program adoption and more.

A few months ago, I discovered a remote code execution issue in the Discord desktop application and I reported it via their Bug Bounty Prog...

The previous article in this series described the general mechanisms that th [...]

Russian-speaking hacking group Turla has hacked into the systems of an undisclosed European government organization according to a new Accenture Cyber Threat Intelligence (ACTI) report.

Vulnerabilities and tools for the PAX Payment Devices, including D200, S80, S300, S800, S900, S920

Contribute to MalPhobic/MalwareReports development by creating an account on GitHub.

by Worawit Wangwarunyoo , DATAFARM Research Team, Datafarm Company Limited

exploit NAT/firewalls to access TCP/UDP services bound to any system behind victim's NAT

With a real-world example: