With Sophos Cloud Native Security, you can easily integrate protection across multiple environments while minimizing detection time and response.

My CTF WriteUps. Contribute to hg8/ctf-writeup development by creating an account on GitHub.

BSidesBelfast (October 31st 2019) was the first time that I actually presented at a major conference. I’ve been to quite a few other BSides events, but always as an attendee, never as a speaker. That all changed when I got the opportunity to present a talk…

Tired of proving you're not a robot? In this post, I'll show how you can partially bypass Google reCAPTCHA by using a new Turbo Intruder feature to trigger a race condition. This vulnerability was rep

So you can only inject SQL if application is not filtering quotes? I’m not talking about injections like id=1 where you can simply start to inject statements! I’m talking about a simple trick that allows a tester or attacker to break out from a string value…

This is a write up on how to do Jerry Machine on Hack The Box. I’ll try to make this write up as beginner friendly as much as possible so…

Let’s take a look at some essential OSINT resources plus recent developments in the areas of data, tooling, content and community.

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique...

PayloadBox

Anti-virus Exploitation Hey guys, long time no article! Over the past few months, I have been looking into exploitation of anti-viruses via logic bugs. I will briefly discuss the approach towards performing vulnerability research of these security products…

A collection of links related to VMware escape exploits - xairy/vmware-exploitation

Last week Intigriti had posted an XSS challenge on Twitter. I decided to give it a look. Today , in this article I am going to explain how I solved this challenge. Here is the code, const whitelist = ['intigriti.com','intigriti.io']; var url = new URL(l…

A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileg...

Time to grab yourself a drink, this will take a while!







We are incredibly excited to announce our fourth and final release of 2019, Kali Linux 2019.4, which is available immediately for download.
2019.4 includes some exciting new updates:…

Hello All

GitHub Gist: instantly share code, notes, and snippets.

Hey everyone, I’d like to share how I found a simple API authorization bug in a private program, which affected thousands of sub-domains…

This is a write-up on how I solved Chainsaw from HacktheBox.