Recorded Future’s Insikt Group has discovered a new malware campaign targeting the Cambodian government using an ASEAN-themed spearphish.

Diff tool for comparing symbols in PDB files. Contribute to WalkingCat/SymDiff development by creating an account on GitHub.

Disclosing a vulnerability in Microsoft Azure's VM extension known as the Network Watcher Agent for Linux.

Ataware Ransomware Stage 2 uses Parent PID Spoofing technique to change it parent PID to lsass.exe and download the final Ataware Ransomware.

A blog focusing on hardware and software reverse engineering

Tearing Down HWP Files To Expose a Trojan

SmartStoreNET 4.0.0 is vulnerable to Remote code execution (RCE) and elevation of privileges (EoP)

Decrypt iOS binaries at runtime. Contribute to evilpenguin/MachoDecrypt development by creating an account on GitHub.

The NAN bindings provided by png-img for libpng are vulnerable to an integer overflow which results in an underallocation of heap memory and subsequent heap memory corruption.

This article presents writeups for three of the reverse engineering challenges from the HacktheBox University CTF.

/proc/kmem reimplementation for windows

According to Wikipedia, 1768 Kelvin is the melting point of the metal cobalt. This tool decodes and dumps the configuration of Cobalt Strike beacons. You can find a sample beacon here. 1768_v0_0_3.…

By Arthur Gerkis and David Barksdale This series of posts makes public some old Firefox research which our Zero-Day customers had access to before it was known publicly, and then our N-Day customers after it was patched. We’ve also used this research to teach…

In this write-up, I will explain how I was able to chain five vulnerabilities that lead to one link click account takeover.

It's happening: Ghidra is finally getting a debugger! https://t.co/rQeWPYwg3i

A searchable Linux system call table for the x86-64 architecture, with arguments and links to manual and implementation.

This complete guide explains all about Linux system calls with sample codes and results.

Log iOS network traffic without a proxy. Contribute to evilpenguin/NetworkSniffer development by creating an account on GitHub.