Interactive malware hunting service. Live testing of most type of threats in any environments. No installation and no waiting necessary.

Tales of a preoccupied developer

In this video we go over what deeplinks are and ways they can be exploited. PoC examples and example reports are also reviewed.

While researching a bug bounty target, I came across a web application that processed a custom file type which was actually just a ZIP file that contains an XML that functions as a manifest. If handled naively, this packaging pattern creates additional security…

I've been studying the guidance computer from a Titan II nuclear missile. This compact computer was used in the 1970s to guide a Titan II ...

Security Reseacher Frans Rosén on what is a bucket policy, upload policies vs pre-signed URLs, and exploiting upload policies. Learn more now.

Slides for Reverse Engineering 101 in 20 minutes as presented at Pancakes Con - GitHub - SynapticRewrite/RE101in20min: Slides for Reverse Engineering 101 in 20 minutes as presented at Pancakes Con

How to inject meterpreter stager straight into a process running on a remote Linux system without touching disk and using only ssh and python.

Blog post: https://blog.sektor7.net/#!res/2018/pure-in-memory-linux.md
Blog: https://blog.sektor7.net
On-line courses:…

This was a simple and fun challenge which demonstrated a common vulnerability in web API's which are used by mobile applications.

Every once a while, you'll find what looks like a healthy XSS vulnerability, only to bash your head against a limited charset that prevents exploitation. One common restriction is a website that doesn

Goals:

A detailed look at interrupts and exceptions on modern architectures. This article covers servicing and nuances of software interrupts and exceptions.

A guide that will explain how to code scripts in Frida