THREAD: I'm looking at a Huawei P20 from China, let see what can I found

A PowerShell script to download all files, messages and user profiles that a user has access to in slack. - GitHub - clr2of8/SlackExtract: A PowerShell script to download all files, messages and us...

DoHC2 allows the ExternalC2 library from Ryan Hanson (https://github.com/ryhanson/ExternalC2) to be leveraged for command and control (C2) via DNS over HTTPS (DoH). - SpiderLabs/DoHC2

PoC for persisting .NET payloads in Windows Notification Facility (WNF) state names using low-level Windows Kernel API calls. - ustayready/CasperStager

Sometimes when you are in the middle of an engagement, you will come across a hurdle which requires a quick bit of research, coding, and a little bit of luck. This was the case with a recent engagement in which we came across Cisco AMP, an endpoint protection…

#CVE-2018-3246 Weblogic XML External Entity (XXE). I utilized Weblogic 12.1.3.0.0 for the test. https://t.co/5yjGBafXBD

CVE-2018-2893-PoC. Contribute to pyn3rd/CVE-2018-2893 development by creating an account on GitHub.

There are tons of VPN options out there, and the field is confusing enough that I did a post on the topic a while back to help people pick one of the

Contribute to HanseSecure/metasploit-modules development by creating an account on GitHub.

PoC for persisting .NET payloads in Windows Notification Facility (WNF) state names using low-level Windows Kernel API calls. - ustayready/CasperStager

Hello again. In my previous posts I detailed how to manually get SYSTEM shell from Local Administrators users. That’s interesting but very late game during a penetration assessment as it is presumed that you already owned the target machine.

Los ciberdelincuentes decidieron reducir los montos para retirar el dinero, y así, tratar de evitar que se prendieran las alertas de la banca.

Government auditors traced a malware infection back to a single porn-watching employee within the U.S. Geological Survey.

Jugal Parikh, Microsoft
Holly Stewart, Microsoft

Humans are susceptible to social engineering. Machines are susceptible to tampering. Machine learning is vulnerable to adversarial attacks. Singular machine learning models can be “gamed” leading to unexpected…

Sandboxed version now available to Windows Insiders and anyone else who force-enables it in Windows 10 version 1703 and above.