Offensive Pentesting learning path → Getting Started module → 02 of 04, Vulnversity. Practice Active Reconnaissance, Web Appplication…

1. APT Group Analysis and TTP Mapping

When a company get hacked, it’s too much to handle by one person. It’s a sinking ship. In order to survive or defend the company’s data…

🐜 Do you really want to know about it? 🐅

Introduction

The purpose is to scan hooked NTDLL and retrieve the Syscall number to then do an indirect Syscall with it, thus allowing the bypass of AV/EDR

Chisel-Strike is .NET XOR encrypted cobalt strike aggressor implementation for the chisel to utilize faster proxy and advanced socks5 capabilities

APKLeaks using jadx dissambler to decompile APK file. If it doesn't exist in your environment, it'll ask you to download or nah.

MediaTek's January 2025 Product Security Bulletin addresses CVE-2024-20154, a critical RCE vulnerability in modem firmware, affecting over 40 device models.

Uncover the details of CVE-2024-40766 vulnerability in SonicWall NSA devices and the alarming number of organizations still exposed to it.

Discover the risks of Argo misconfigurations in Kubernetes. Find out how attackers can compromise entire clusters and how to prevent it.

Discover the vulnerability (CVE-2024-8474) that could have exposed your private keys and decrypted your VPN traffic. Stay protected with a secure VPN connection

Stay informed about the record-breaking surge in CVE publications. Explore the key highlights from the annual CVE data review for 2024.

Beware of PhishWP: a dangerous WordPress plugin that disguises itself as a legitimate tool but actually steals your sensitive information.

Uncover the advanced cyberespionage campaign using the EAGERBEE backdoor to infiltrate ISPs and governmental institutions in the Middle East.

The Free Software Foundation takes a stand against Microsoft's controversial TPM 2.0 requirement for Windows 11. Learn about the potential security risks and the importance of free software.

Introduction

Explore Broken Authentication vulnerabilities and techniques with TryHackMe and OWASPBWA.

Jumpstarting My IT Career with the Google IT Support Professional Certificate

Malware - Hidden threat 👹

Cyber security threats 😲