There was a time when coming up with a new handy way of dealing with the day-to-day struggles was called Life Tips. But now we have a new…

When I think about why I’ve dedicated my career to technology, specifically cybersecurity, DevSecOps, and emerging fields like quantum computing, I find that the answer goes beyond algorithms…

picoCTF is an online CTF that is open to players of all skill levels. This article will show three beginner-level challenges in the…

Hashdump mit Meterpreter durchführen

Introduction

A Consensus-Building Framework for Real Alignment Across All Teams

Offensive Pentesting learning path → Getting Started module → 02 of 04, Vulnversity. Practice Active Reconnaissance, Web Appplication…

1. APT Group Analysis and TTP Mapping

When a company get hacked, it’s too much to handle by one person. It’s a sinking ship. In order to survive or defend the company’s data…

🐜 Do you really want to know about it? 🐅

Introduction

The purpose is to scan hooked NTDLL and retrieve the Syscall number to then do an indirect Syscall with it, thus allowing the bypass of AV/EDR

Chisel-Strike is .NET XOR encrypted cobalt strike aggressor implementation for the chisel to utilize faster proxy and advanced socks5 capabilities

APKLeaks using jadx dissambler to decompile APK file. If it doesn't exist in your environment, it'll ask you to download or nah.

MediaTek's January 2025 Product Security Bulletin addresses CVE-2024-20154, a critical RCE vulnerability in modem firmware, affecting over 40 device models.

Uncover the details of CVE-2024-40766 vulnerability in SonicWall NSA devices and the alarming number of organizations still exposed to it.

Discover the risks of Argo misconfigurations in Kubernetes. Find out how attackers can compromise entire clusters and how to prevent it.

Discover the vulnerability (CVE-2024-8474) that could have exposed your private keys and decrypted your VPN traffic. Stay protected with a secure VPN connection

Stay informed about the record-breaking surge in CVE publications. Explore the key highlights from the annual CVE data review for 2024.

Beware of PhishWP: a dangerous WordPress plugin that disguises itself as a legitimate tool but actually steals your sensitive information.

Uncover the advanced cyberespionage campaign using the EAGERBEE backdoor to infiltrate ISPs and governmental institutions in the Middle East.