Powerful plugins and add-ons for hackers. Contribute to Hack-with-Github/Powerful-Plugins development by creating an account on GitHub.

Proof of concept showing how to exploit the CVE-2018-11759 - immunIT/CVE-2018-11759

Dirhunt is a web crawler optimize for search and analyze directories. This tool can find interesting things if the server has the "index of" mode enabled

A Collection of Hacks in IoT Space so that we can address them (hopefully). - nebgnahz/awesome-iot-hacks

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data. - minimaxir/big-list-of-naughty-strings

My paper of the week is [link]:

A data breach at HSBC Bank has allowed attackers to gain access to a limited amount of customer's information such as account numbers, balances, addresses, transaction history, and much more.

VirtualBox E1000 Guest-to-Host Escape. Contribute to MorteNoir1/virtualbox_e1000_0day development by creating an account on GitHub.

Hello again. In my previous posts I detailed how to manually get SYSTEM shell from Local Administrators users. That’s interesting but very late game during a penetration assessment as it is presumed that you already owned the target machine.

Telecom with ties to China's government misdirected traffic for two and a half years.

XPC service vulnerabilities are a convenient way to elevate privileges and/or evade the sandbox. This post will look at a race condition in GSSCred on macOS ...

bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting. - LewisArdern/bXSS

Stan Lee helped usher comics out of a dark age in the 1960s by co-creating morally complex heroes, including the self-doubting Spider-Man, the bickering Fantastic Four, the swaggering Iron Man and the raging Incredible Hulk. His name became synonymous with…