Meet BrokenType – the font fuzzing toolset that helped me find 39 vulns in the Windows kernel and user-mode Uniscribe library in 2015-2017. It includes a font mutator, generator and loader. Now on GitHub: https://t.co/Z9aDlP7xvp

Project Zero blog: "Windows Exploitation Tricks: Exploiting Arbitrary Object Directory Creation for Local Elevation of Privilege" by @tiraniddo - https://t.co/YxONKNlgc2

WindowsDefenderTools - scripts for reverse engineering of Windows Defender Antivirus' binary emulator. Based on IDAPython. https://t.co/kVW2WgHQEr

A full analysis of the #Microsoft #Exchange code execution bug released today (CVE-2018-8302) is now available. Includes a video demo of the exploit in action. Read the details at https://t.co/evpdEBMP8G.

The FireEye Labs Advanced Reverse Engineering (FLARE) team’s annual reverse engineering challenge will start at 8:00 p.m. ET on Aug. 24, 2018.

Posted by Natalie Silvanovich, Project Zero WebAssembly is a format that allows code written in assembly-like instructions to be run from J...

Yet Another YARA rule Generator. Contribute to jimmy-sonny/YaYaGen development by creating an account on GitHub.

Облако Mail.Ru - это ваше персональное надежное хранилище в интернете. Все нужные файлы всегда под рукой, доступны в любой точке мира с компьютера или смартфона.

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter. - infosecn1nja/Red-Teaming-Toolkit

Burp is getting a brand new REST API, which can be used by other tools to integrate with Burp Suite: In the initial release, the REST API supports launching vulnerability scans and obtaining the resul

Cool writeup about solving the #defcon26 badge. https://t.co/L8EsRpcYQ5 #badglife #defcon

In an effort to share more of my source code publicly, I've uploaded Bochspwn Reloaded (the kernel infoleak detector) to GitHub. For those interested, it may shed some light on the implementation details of the project. See: https://t.co/hnPva5FDs6

Very interesting Server Side Sandbox Evasion project https://t.co/csjgCd9hiS Generate an Htaccess file which detects HTTP Requests originating from sandbox vendors and cloud based services. Detects: 1. AWS and Azure 2. TOR 3. @Proofpoint and so on https:…

VirtualBox VM escape - CVE-2018-2844 PoC exploit - https://t.co/uky6eRTc9K

Первый в мире пиратский ресурс, который открыл массовый доступ к десяткам миллионов научных статей

Microsoft Edge Chakra OP_NewScObjArray Type Confusion Bug & Full Poc Exploit by bo13oy of Qihoo 360 Vulcan Team: https://t.co/1OIiF6PtBz