Vulnerability Research on Low-Level Systems

Group Policy Objects manipulation and exploitation framework - synacktiv/GroupPolicyBackdoor

A new proof-of-concept tool named EDR-Freeze has been developed, capable of placing Endpoint Detection and Response (EDR) and antivirus solutions into a suspended "coma" state.

Doing Windows Runtime things from PowerShell.

IntroductionIn October 2024, InfoSect participated in Pwn2Own – a bug bounty competition against embedded devices such as cameras, NAS’, and smart speakers. In this blog, I’ll dis…

Hello everyone, this article is the continuation of part 1 and will mainly focus on the practical aspect of what we’ve been talking about…

A list of OSINT tools & resources for (fraud-)investigators, CTI-analysts, KYC, AML and more. - GitHub - K2SOsint/Legendary_OSINT: A list of OSINT tools & resources for (fraud-)inv...

A newly discovered DLL hijacking vulnerability in Notepad++, the popular source code editor, could allow attackers to execute arbitrary code on a victim's machine.

Introduction Back in the beginning of the year 2024, we started our project on ANGLE, it is a chromium graphic library, handling rendering stuff on chrome process. Fortunately, our team found some of the vulnerabilities in different areas (suto has shared…

Discover how to reverse engineer Windows 11 kernel internals, identify undocumented features, and enable hidden telemetry for enhanced EDR visibility.

Retr0's Threat Research

It’s high time we get another blog post going, and what better time than now to talk about PE loaders! Specifically, an In-Memory PE Loader. 😸 In short, we’re going to implement a PE (Portable Executable) loader that downloads a PE file (in this case, putty.exe)…

A list of public attacks on BitLocker. Contribute to Wack0/bitlocker-attacks development by creating an account on GitHub.