uafuzz is a directed fuzzer dedicated to Use-After-Free (UAF) bugs at binary-level by carefully tuning the key components of directed fuzzing

A look at CVE-2020-15150, a remote code execution vulnerability in the Elixir-based Paginator.

A checklist for intercepting traffic from Android applications using various techniques

Here you have the slides of my recent talk at #ncn2k20 https://t.co/SXnUt2Lhzv. For more info, check the paper here https://t.co/B3VKXjvtyy (or here https://t.co/vX5AwUtrxI) -- I'll write a blog post in @reverseame soon. Stay tuned!

Over the course of 8 hours the PYSA/Mespinoza threat actors used Empire and Koadic as well as RDP to move laterally throughout the environment, grabbing credentials from as many systems as possible on the way to their objective. The threat actors took their…

If you follow me on Twitter, you probably know that I developed my own Windows privilege escalation enumeration script - PrivescCheck - which is a sort of updated and extended version of the famous PowerUp. If you have ever run this script on Windows 7 or…

Description When Samsung Shannon baseband receives message P-TMSI REALLOCATION COMMAND (9.4.7 in TS 24.008) from network, the length of the Mobile Identity IE (10.5.1.4) is not properly checked. Mobile identity data is directly copied to a stack buffer without…

Mobile App Digital Forensic Analysis

Note that this post does not reflect the opinions of my employer nor my colleagues, and I conducted this research on my own time.

[WARNING] This blog post is created when Microsoft Windows still came in a physical box with multiple installation disks. Microsoft released a new detection this month for Microsoft Defender for Id…

I’ve spent a good year working on a security strategy to manage multi-cloud environments, in this article I want to share what I wish we did in advance to be better prepared.

In this article, we’ll be discussing, how to perform Directory Traversal or Path Traversal attacks, aka “dot-dot-slash”, “directory…

Contribute to theevilbit/workshops development by creating an account on GitHub.

An Open-Source iOS 11.0 -> 11.4.1 (soon iOS 13) Jailbreak, made for teaching purposes. - GeoSn0w/Blizzard-Jailbreak

RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services. - microsoft/restler...

This article aims to help administrators manage SSL/TLS certificates used to secure RDP connections in Windows. First, we will look at how to replace a self-signed RDP certificate with a…

It's 2020. Quarantines are everywhere – and here I'm writing about one, too. But this quarantine is of a different kind. In this article I'll describe the Linux Kernel Heap Quarantine that I developed for mitigating kernel use-after-free exploitation.