Yes it’s still easy to get Domain Admin “before lunch” as it was when I first started.

Code-Audit-Challenges. Contribute to CHYbeta/Code-Audit-Challenges development by creating an account on GitHub.

Apache POI is a popular Java library for working with Microsoft documents. When I was recently looking into the library, I noticed a little vulnerability which then became CVE-2019–12415.

onliner to quickly test some urls with curl: cat plainurls.txt | while read u;do echo "$(printf '%-100s' "$u")-> $((curl -I -s -m 5 -k "$u"||echo KO)|head -n 1 -)"; done https://t.co/Rou0D3kU60

Hey everybody! I just updated my Snek module to support PowerShell 6 and 7! It's using the .NET Standard Python for .NET binaries so you should...

Modernize without Compromise

My CTF WriteUps. Contribute to hg8/ctf-writeup development by creating an account on GitHub.

BSidesBelfast (October 31st 2019) was the first time that I actually presented at a major conference. I’ve been to quite a few other BSides events, but always as an attendee, never as a speaker. That all changed when I got the opportunity to present a talk…

Tired of proving you're not a robot? In this post, I'll show how you can partially bypass Google reCAPTCHA by using a new Turbo Intruder feature to trigger a race condition. This vulnerability was rep

So you can only inject SQL if application is not filtering quotes? I’m not talking about injections like id=1 where you can simply start to inject statements! I’m talking about a simple trick that allows a tester or attacker to break out from a string value…

This is a write up on how to do Jerry Machine on Hack The Box. I’ll try to make this write up as beginner friendly as much as possible so…

Let’s take a look at some essential OSINT resources plus recent developments in the areas of data, tooling, content and community.

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique...

PayloadBox

Anti-virus Exploitation Hey guys, long time no article! Over the past few months, I have been looking into exploitation of anti-viruses via logic bugs. I will briefly discuss the approach towards performing vulnerability research of these security products…

A collection of links related to VMware escape exploits - xairy/vmware-exploitation