A few days ago, Cloudflare — along with the rest of the world — learned of a "practical" cache poisoning attack. In this post I’ll walk through the attack and explain how Cloudflare mitigated it for our customers.

This post is a collaboration between myself and Samantha Davison, Trust Engineering Leader. Sam is an expert in transforming security…

Contribute to schlae/sb-firmware development by creating an account on GitHub.

IntroductionThis blog post is intended for folks who are interested in reverse engineering security patches, but don’t have access to expensive tools such as IDA Pro to perform such tasks. First off, we will create a program that introduces a common bug class…

fully automated pentesting tool. Contribute to Chudry/Xerror development by creating an account on GitHub.

SMBExec implementation in Nim - SMBv2 using NTLM Authentication with Pass-The-Hash technique - GitHub - elddy/Nim-SMBExec: SMBExec implementation in Nim - SMBv2 using NTLM Authentication with Pass-...

Hello everyone, this is Shawar Khan and today i am going to disclose some of my top 6 findings that i guess were interesting and usef...

Advisories, proof of concept files and exploits that have been made public by @pedrib. - pedrib/PoC

Posted by Ian Beer, Project Zero NOTE: This specific issue was fixed before the launch of Privacy-Preserving Contact Tracing in iOS 13.5 in...

Disclaimer: I discovered this vulnerability in February and it was fixed in May 2020 (version 5.10.2 and new branch 6.x) due to the change…

Introduction Apigee provides clients with an API management platform that enables them to design, secure, deploy, monitor, and scale API’s. Furthermore Apigee provides clients with a customiz…

Advisories, proof of concept files and exploits that have been made public by @pedrib. - pedrib/PoC