A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities. - h3xduck/TripleCross

Cobalt Strike Beacon Object File (BOF) that uses WinStationConnect API to perform local/remote RDP session hijacking. - netero1010/RDPHijack-BOF

Posted by Maddie Stone, Google Project Zero This blog post is an overview of a talk, “ 0-day In-the-Wild Exploitation in 2022…so far”,...

API Security Project aims to present unique attack & defense methods in API Security field - Cyber-Guy1/API-SecurityEmpire

Introduction.

This article is part of the Security Tech Blog Series: Spring Cleaning for Security, brought to you by David from the Se

PrefaceThis blog is part of the Security Tech Blog Series, written by Shaokang from the Mercari Product Security Team.In

Honeypots are a useful tool to track scanners and new attack vectors. There are plenty of existing honeypot solutions readily available…

What happens when you run an executable on your Windows machine? In this second and final part of the series, we will go through the exact flow CreateProcess carries out to launch a process on Windows.