Exploitation on ARM-based Systems (Troopers18). Contribute to sashs/arm_exploitation development by creating an account on GitHub.

Стало известно, что криптовалютная биржа Coinbase выплатила вознаграждение в размере $10 тысяч аналитикам из финтех-компании VI company, которые обнаружили довольно серьезную уязвимость в смарт-контракте биржи. Данная ошибка давала пользователям возможность…

Where we left off In the first part of this series we presented several injection methods capable of injecting 64-bit DLLs into WoW64 processes, with the intention to eventually use this DLL to hook 64-bit API functions in the process. We finished the post…

Collaborative Reverse Engineering plugin for IDA Pro & Hex-Rays - IDArlingTeam/IDArling

Introduction After a destructive cyber attack had hit this year’s olympics, the malware was quickly dubbed Olympic Destroyer.  Talos were fast to provide initial coverage. A malware explicitl…

Though news of the attack by the WannaCry virus triggered widespread alarm within Boeing and among airline customers during the day Wednesday, by evening the company was calling for calm.

Pivoting guide for penetrations testers or red team members

In R&D we use a lot of open-source projects and we believe giving back to the community is our way of saying ‘Thank you’. More and more security companies are releasing their open-source projects and we would like to contribute with our distributed YARA scanner.

Sofacy, also known as APT28, Fancy Bear, and Tsar Team, is a prolific, well resourced, and persistent adversary. They are sometimes portrayed as wild and reckless, but as seen under our visibility, the group can be pragmatic, measured, and agile.

Process Hollowing (Malware Technique). Contribute to m0n0ph1/Process-Hollowing development by creating an account on GitHub.

The PS4 4.55/FreeBSD BPF kernel exploit writeup is now up on my GitHub repo! The bug is present on any system running FreeBSD such that you have privileges (which we did on PS4). Could be used on other systems for root to ring0 code execution. https://t.co/irpUCdcfEk