This post is for all of you, Russian malware lovers/haters. Analyze it all to your heart's content. Prove or disprove Russian hacki...

I just updated my IDAtropy plugin for IDA Pro with new options, such as the ability to make an entropy chart for all segments, and a xrefs finder to data blocks with the specified entropy, among other things. Ah, and compatible with IDA versions <= 7 …

A photograph showing an alleged leaked Army document revealing a joint project to track anonymous cryptocurrencies seems to have come from a somewhat unlikely place. The photograph reveals some interesting things, one of which is the revelation that the National…

Detailed analysis of attack exploiting Flash Player Hack vulnerability CVE-2018-4878

Ethereum приобрёл огромную популярность как платформа для первичного размещения монет (ICO). Однако она используется не только для токенов ERC20. Рулетки, лоте...

This blog post is authored by Warren Mercer and Paul Rascagneres. Ben Baker and Matthew Molyett contributed to this post.

Update 2/13 08:30 We have updated the information regarding the use of stolen credentials

Update 2/12 12:00: We have updated the destructor…

This blog post is authored by Warren Mercer and Paul Rascagneres.


Executive Summary
The 1st of February, Adobe published an advisory concerning a Flash vulnerability (CVE-2018-4878). This vulnerability is a use after free that allows Remote Code Execute…

Playing with the Tigress software protection. Break some of its protections and solve their reverse engineering challenges. Automatic deobfuscation using symbolic execution, taint analysis and LLVM...

Within two years, IoT attacks have seen rapid evolution. We now see that IoT threats, which have already evolved from admin: admin…

Final project for the M.Sc. in Engineering in Computer Science at Università degli Studi di Roma "La Sapienza" (A.Y. 2016/2017). - fabros/angr-antievasion

Qtum Foundation и сингапурская компания SpaceChain Foundation объявили о партнерстве c целью запуска стандартизированных спутников-кубсатов, которые позволят пользователям Qtum добывать токены на устройствах Raspberry Pi. В Qtum Foundation считают, что алгоритм…

Rhino Security Labs shows how Amazon's AWS APIs can be used for malware C2, subverting blocking and monitoring with a malware channel that uses AWS APIs.

В настоящее время в блокчейне Ethereum работают сотни тысяч смарт-контрактов, управляющих кошельками, токенами, приложениями или использующихся для хранения средств. Группа британских исследователей самостоятельно смогла идентифицировать 34 200 уязвимых смарт…

Find secrets with Gitleaks 🔑. Contribute to gitleaks/gitleaks development by creating an account on GitHub.

InfoCon.org is an archive of hacking and security conference videos, documentaries, rainbow tables, word lists and podcasts.