Today, Maverits is releasing a comprehensive special report on APT28, a Russian state-sponsored cyber espionage group linked to the GRU Military Unit 26165. Known for their advanced operations targeting individuals and organizations of strategic interest…

Introduction Transport Driver Interface Opening the TCP Device Object Connecting to an Endpoint Sending Data...

A cheatsheet for NetExec. Contribute to seriotonctf/cme-nxc-cheat-sheet development by creating an account on GitHub.

The ZDI team offers an analysis of how CVE-2025-0411, a zero-day vulnerability in 7-Zip was actively exploited to target Ukrainian organizations through spear-phishing and homoglyph attacks.

Free educational courses in reverse engineering, malware analysis, and programming - Perkins-Fund/Malware-Bible

USAID has pushed nearly half a billion dollars ($472.6m) through a secretive US government financed NGO, "Internews Network" (IN), which has “worked with” 4,291 media outlets, producing in one year 4,799 hours of broadcasts reaching up to 778 million people…

Crypto ransomware experienced significant changes in 2024 with total ransom payments decreasing 35.82% YoY. Learn more in the 2025 Crypto Crime Report.

⬛️ CLI tool for saving complete web pages as a single HTML file - Y2Z/monolith

I recently read the Unlimited Results: Breaking Firmware Encryption of ESP32-V3 paper. This paper is about breaking the firmware encryption feature of the ESP32 SoC using a Side-Channel attack. This was an interesting read, and soon, I wanted to try to reproduce…

The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot m...

Ransomware.live tracks & monitors ransomware groups' victims and their activity. It was created by Julien Mousqueton, a security researcher. The website provides information on Ransomware groups, victims, negotiations, and payment demands. It also includes…

Two Estonian nationals pleaded guilty yesterday for their operation of a massive, multi-faceted cryptocurrency Ponzi scheme that victimized hundreds of thousands of people from across the world, including in the United States. As part of the defendants’ guilty…

In this lesson, I will teach you how to create a secure C2 infrastructure on the AWS cloud. Firstly we will discuss what a C2 infra is, and it's design, ending up in building our own from start to finish.

The ubiquitous ESP32 microchip made by Chinese manufacturer Espressif and used by over 1 billion units as of 2023 contains an undocumented "backdoor" that could be leveraged for attacks.

In the previous blog post on ADCS (Goad Pwning Part 6), ESC1, ESC2, ESC3, ESC4, ESC6, and ESC8 were exploited.