The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data. - minimaxir/big-list-of-naughty-strings

My paper of the week is [link]:

A data breach at HSBC Bank has allowed attackers to gain access to a limited amount of customer's information such as account numbers, balances, addresses, transaction history, and much more.

VirtualBox E1000 Guest-to-Host Escape. Contribute to MorteNoir1/virtualbox_e1000_0day development by creating an account on GitHub.

Hello again. In my previous posts I detailed how to manually get SYSTEM shell from Local Administrators users. That’s interesting but very late game during a penetration assessment as it is presumed that you already owned the target machine.

Telecom with ties to China's government misdirected traffic for two and a half years.

XPC service vulnerabilities are a convenient way to elevate privileges and/or evade the sandbox. This post will look at a race condition in GSSCred on macOS ...

bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting. - LewisArdern/bXSS

Stan Lee helped usher comics out of a dark age in the 1960s by co-creating morally complex heroes, including the self-doubting Spider-Man, the bickering Fantastic Four, the swaggering Iron Man and the raging Incredible Hulk. His name became synonymous with…

Serverless functions have so much potential - here’s a few useful examples I use when pentesting or doing bug bounties. Who needs testing infrastructure?

Leaked court documents show that Italian authorities have no idea who hacked the government spyware maker Hacking Team.

BGP route leak interrupts access to Google’s services throughout the world. Traffic rerouted via Russia and China and slammed into the great firewall.