NVISO enjoys an excellent working relationship with SANS and has been involved as Instructors and Course Authors for a variety of their courses: For SEC511, Continuous Monitoring and Security Opera…

Interesting APT Report Collection And Some Special IOCs - blackorbird/APT_REPORT

On August 24th, 2022, we reported a vulnerability to Netlify affecting their Next.js "netlify-ipx" repository which would allow an attacker to achieve persistent cross-site scripting and full-response server side request forgery on any website out of the…

Catching a reverse shell over netcat is great…until you accidentally Ctrl-C and lose it. These techniques let you upgrade your shell to a proper TTY

Top disclosed reports from HackerOne. Contribute to reddelexc/hackerone-reports development by creating an account on GitHub.

Contribute to razzorsec/AuditorsRoadmap development by creating an account on GitHub.

In this repository I'll host my research and methodologies for auditing vulnerabilities - GitHub - OlivierLaflamme/Auditing-Vulnerabilities: In this repository I'll host my researc...

A collection of write-ups and walkthroughs of my adventures through https://hackthebox.eu. Includes retired machines and challenges.

Vulnerable Code Snippets. Contribute to bughuntar/Vulnerable-Code-Snippets development by creating an account on GitHub.

RedTeaming TTPs
Bug Hunting
Web PenTest
Web Security
Binary Analysis
Exploit DEV
Malware DEV
Malware Analysis
BlueTeaming
Threat Hunting
SOC
CSIRT
FORENSICS
Open-Source Intelligence(OSINT)
Cybersec Tools

A collection of smart contract vulnerabilities along with prevention methods - kadenzipfel/smart-contract-vulnerabilities

This Repository contains list of Common Solidity SmartContract Attack Vectors. If you find any attack vectors missing, you can create a pull request and be a contributor of the project. - Quillhash...

Comprehensive list of known attack vectors and common anti-patterns - sigp/solidity-security-blog

Powershell shellcode one-liner. Powershell免杀一句话上线器便捷生成 - baiyies/PowerOneLiner

tl:dr: The SCCM AdminService API is vulnerable to NTLM relaying and can be abused for SCCM site takeover.

Friday, August 11, 2023

VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF - hardenedvault/ved-ebpf

A PoC of the ContainYourself research presented in DEFCON 31, which abuses the Windows containers framework to bypass EDRs. - deepinstinct/ContainYourself

A Rust crate for parsing Windows user minidumps. Contribute to 0vercl0k/udmp-parser-rs development by creating an account on GitHub.

Overview