There are a lot of tutorials out there about exploitation of memory corruption bugs, but I struggled to find step-by-step ones, that would s...

In part 1 we've covered basic mechanisms of exploitation, but there is one caveat about example from part 1, that is we are not executing ou...

This is continuation of my guide on binary exploitation, in this part we are going to cover return-to-libc attack which was invented to defe...

5 points and 3 comments so far on reddit

MEGA provides free cloud storage with convenient and powerful always-on privacy. Claim your free 20GB now

A new wave of document attacks targeting inboxes do not require enabling macros in order for adversaries to trigger an infection chain that ultimately delivers FormBook malware.

Facebook launches data Abuse Bounty Program that rewards researchers who report the abuse of data by app developers.The reward's based on just like any other bug Bounty Program. for researchers who notifies high severity bug's, they offer rewards up to $40…

💀Proof-of-Concept for CVE-2018-7600 Drupal SA-CORE-2018-002 - a2u/CVE-2018-7600

A new demonstration of malware shows that air-gapped computers may still be at risk.

Security researchers from the University of the Negev, Israel presented this new type of covert channel dubbed PowerHammer, that allows attackers to extract data from air-gapped computers through AC power lines.