Description When Samsung Shannon baseband receives message P-TMSI REALLOCATION COMMAND (9.4.7 in TS 24.008) from network, the length of the Mobile Identity IE (10.5.1.4) is not properly checked. Mobile identity data is directly copied to a stack buffer without…

Mobile App Digital Forensic Analysis

Note that this post does not reflect the opinions of my employer nor my colleagues, and I conducted this research on my own time.

[WARNING] This blog post is created when Microsoft Windows still came in a physical box with multiple installation disks. Microsoft released a new detection this month for Microsoft Defender for Id…

I’ve spent a good year working on a security strategy to manage multi-cloud environments, in this article I want to share what I wish we did in advance to be better prepared.

In this article, we’ll be discussing, how to perform Directory Traversal or Path Traversal attacks, aka “dot-dot-slash”, “directory…

Contribute to theevilbit/workshops development by creating an account on GitHub.

An Open-Source iOS 11.0 -> 11.4.1 (soon iOS 13) Jailbreak, made for teaching purposes. - GeoSn0w/Blizzard-Jailbreak

RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services. - microsoft/restler...

This article aims to help administrators manage SSL/TLS certificates used to secure RDP connections in Windows. First, we will look at how to replace a self-signed RDP certificate with a…

It's 2020. Quarantines are everywhere – and here I'm writing about one, too. But this quarantine is of a different kind. In this article I'll describe the Linux Kernel Heap Quarantine that I developed for mitigating kernel use-after-free exploitation.

This is a joke, but also everyone is on vacation, so how about a thread where we actually *do* decode this, because Windows license keys aren't actually random. https://t.co/zka8KQXH67

Nettitude discovered a vulnerability in the ‘madCodeHook’ third party library which caused a number of security products, including Cisco AMP and Morphisec Unified Threat Prevention Platform, to contain a local privilege escalation vulnerability.

Posted by Ian Beer, Project ZeroNOTE: This specific issue was fixed before the launch of Privacy-...

I’d like to introduce PyOracle2. It is a python-based padding oracle exploitation tool. Why make another tool? Yes, several other padding oracle exploitation tools already exist. Some of them are r…

BISMUTH, which has been running increasingly complex cyberespionage attacks as early as 2012, deployed Monero coin miners in campaigns from July to August 2020. The group's use of coin miners was unexpected, but it was consistent with their longtime methods…