Research By: Yoav Alon, Netanel Ben-Simon Introduction The year 2017 was an inflection point in the vulnerability landscape. The number of new vulnerabilities reported that year was around 14,000, which is over twice the number from the year before (see table…

Practical Insider Threat Penetration Testing Cases with Scapy (Shell Code and Protocol Evasion) by Dennis Chow As the penetration testing …

Introduction Launching an attack does not always require high technical aptitude on the part of a threat actor, especially when there are ready-made tools available for every stage of the infection chain. Delivery document builders and MaaS (Malware-as-a…

Hello Fellow Hackers!

Maybe you’re a web app pentester who gets frustrated with finding self-xss on sites you test, or maybe you’re a website owner who keeps rejecting self-xss as a valid vulnerability. This post is intended to help both understand the risk involved in self-xss…

Thick Client? What do you mean by that? Thick client is the kind of application which is installed on the …

快速搭建各种漏洞环境(Various vulnerability environment). Contribute to Medicean/VulApps development by creating an account on GitHub.

MBS - Massy Boutakus Searcher : An FTP/HTTP Servers Files Seacher - SofianeHamlaoui/Massy-Boutakus-Searcher

How to fix meterpreter session injected on a remote Linux system with self-modifying dd.Blog post: https://blog.sektor7.net/#!res/2018/pure-in-memory-linux....

SharePoint Workflows XOML Injection Exploit CVE-2020-0646 | Sploitus | Exploit & Hacktool Search Engine

Interested in pushing hacking techniques beyond the current state of the art? Read James Kettle's guide on how to become a web security researcher.

I used my available time to read NoScripts code and discovered an interesting check, which handles a header I either forgot about or never ...

mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse - blackarrowsec/mssqlproxy

This is my second post on white-box analysis but for another technology stack and vulnerability category: .NET deserialization leading to…

This article aims to explain the Kerberoasting attack principle, based on the TGS request and the SPN attributes of Active Directory accounts.

Driver loader for bypassing Windows x64 Driver Signature Enforcement - hfiref0x/TDL

🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI. - KishanBagaria/padding-oracle-attacker