Contribute to cynops/Frida-Hooks development by creating an account on GitHub.

I would like to report a `RCE` issue in the `tree-kill` module.
It allows to execute `arbitrary commands remotely inside the victim's PC`

# Module
**module name:** `tree-kill`
**version:**...

Enumerate information from NTLM authentication enabled web endpoints 🔎 - pwnfoo/NTLMRecon

Blog about computer security, malware and reverse engineering.

I want to tell you the story of a service account which lost all its powers (a.k.a. privileges). Windows world is getting increasingly ruthless and when the system considers you are not worthy, this is what happens. Fortunately for our service account, all…

My musings with PowerShell. Contribute to FuzzySecurity/PowerShell-Suite development by creating an account on GitHub.

Home of Nikhil SamratAshok Mittal. Posts about Red Teaming, Offensive PowerShell, Active Directory and Pen Testing.

In Part I of this series, we reviewed some of the background and underlying technologies utilized by FreeIPA. We also discussed several…

A malicious application can take advantage of a vulnerability in Symantec Endpoint Protection to leak privileged information and/or execute code with higher privileges, thus taking full control over the affected host.

CVE: CVE-2019-19609
Vendor: Strapi (https://strapi.io)
Product: Strapi Framework
Version Affected: strapi-3.0.0-beta.17.7 and earlier
Fix PR: https://github.com/strapi/strapi/pull/4636
NPM Advisory: https://www.npmjs.com/advisories/1424
Description:
“Manage…

Aviatrix, an enterprise VPN company with customers including Nasa, Shell and BT, has recently patched a vulnerability uncovered by Immersive Labs researcher and content engineer Alex Seymour.

In this article, we are going to describe the utility of Certutil tool and how vital it is in Windows Penetration Testing. TL; DR Certutil

Pivoting Frontend for Pre-Seeded Password Databases - audibleblink/passdb-frontend