This is an exploit for CVE-2020-0674 that runs on the x64 version of IE 8, 9, 10, and 11 on Windows 7. - maxpl0it/CVE-2020-0674-Exploit

Heading into the research talks at BAR 2019 now. Up first is B2R2: Building an Efficient Front-End for Binary Analysis, our best paper winner.

ELF file viewer/editor for Windows, Linux and MacOS. - horsicq/XELFViewer

pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE) - cytopia/pwncat

Vendors as well as developers try to protect their product from reverse engineers for multiple reasons. On the one hand they want to protect their intellectual property, on the other hand they migh…

We examine the dangers of network integer arithmetic based on a case study of flaws reported to the ntop project.

With Zeus Sphinx back in the financial cybercrime arena, IBM X-Force is providing a technical analysis of the Sphinx Trojan's current version, which was first released in the wild in late 2019.

PrintDemon is a PoC for a series of issues in the Windows Print Spooler service, as well as potetial misuses of the functionality. - ionescu007/PrintDemon

Ramsay can infect air-gapped computers, collect Word, PDF, and ZIP files in a hidden folder, and then wait for exfiltration.

A good part of my research time at Doyensec was devoted to building a flexible ASN.1 grammar-based fuzzer for testing TLS certificate parsers. I learned a lot in the process, but I often struggled to find good resources on these topics. In this blogpost I…

About a year have passed since CVE-2019-0685 vulnerability that I reported to MSRC got patched. Initially I planned to write about it sooner but time flies so fast. So here is a long overdue blog post about the vulnerability. CVE-2019-0685 is a reference…

Sergei is a veteran of the early days of the computing industry as it was
developing in the Soviet Union. I had the pleasure of working and learning from
him over the past year, and in that time I picked up more important lessons
about both life and embedded…

~450K QNAP NAS devices were vulnerable to a pre-auth root RCE, which chains multiple CVSS-9.8 vulnerabilities. ALL QNAP models were…