To intercept, inspect or manipulate HTTPS traffic, you need the HTTPS client to trust you. If you want to intercept your own HTTPS on Android, perhaps to...

Type confusion, often combined with use-after-free, is the main attack vector to compromise modern C++ software like browsers or virtual ...

Bienvenido al portal de CCN-CERT

With a real-world example:

Os dejo aquí las diapositivas de mi charla en las #XIVJornadasCCNCERT @CCNCERT por si queréis consultar más a fondo el material adicional https://t.co/r9X2Iai6f9, que las disfrutéis!

We recently came across a Ursnif/Gozi-ISFB sample that manipulated TLS callbacks while injecting to child process.

I have submitted this to the PEAR bug tracker as well as the PEAR group mailing list, and I'm not sure if either has gone through, so opening an issue here with the hope that this is the right ...

The following piece is the culmination of a three-month long investigation into Smart TVs running Android. Having lived through this research experience, I can wholeheartedly say that there were multiple moments that I, and another security researcher that…

Bidirectional XPC message interception and more. Powered by Frida - hot3eed/xpcspy

A command-line benchmarking tool. Contribute to sharkdp/hyperfine development by creating an account on GitHub.

iOS SSL Pinning Bypass (iOS 8 - 14). Contribute to evilpenguin/SSLBypass development by creating an account on GitHub.

I discovered an easy way to bypass the Windows Defender Attack Surface Reduction Rules using code inside a macro. This issue has already been fixed with the Windows Defender virus definition versio…

Threat actors targeting macOS are deploying a new trick to hide payloads and avoid detection thanks to an old technology: the named resource fork.

In which I take a crack at pointing a neural network at random noise, and achieve 95+% predictive bitwise accuracy against my hated foe in this world, Xorshift128.