Research By: Yoav Alon, Netanel Ben-Simon Introduction The year 2017 was an inflection point in the vulnerability landscape. The number of new vulnerabilities reported that year was around 14,000, which is over twice the number from the year before (see table…

Contribute to hackersql/carbanak_source_code_leak_maybe development by creating an account on GitHub.

New 'Magellan' vulnerability will haunt the app ecosystem for years to come.

Packet capture on Windows without a kernel driver. Contribute to nospaceships/raw-socket-sniffer development by creating an account on GitHub.

Using #qb_triton, #IDA Python and #Hexrays Decompiler to deobfuscate code - still lots to be done but starting getting readable results !

第51回 情報科学若手の会 若手特別講演 https://wakate.org/2018/07/28/51th-general/

The new DNS-over-TLS (DoT) and DNS-over-HTTPS (DoH) protocols are available for enabling end user's privacy and security given the fact t...

In previous three parts of "Remsec driver analysis" research I've tried to show, how Remsec (aka Cremes) Ring 0 code works and how it is loa...

Contribute to saaramar/35C3_Modern_Windows_Userspace_Exploitation development by creating an account on GitHub.

The U.S. has accused Kaspersky Lab of working with Russian spies. But sources say the company exposed a massive breach that U.S. authorities missed.

Update 2019/01/14: Crowdstrike asked me to share an official statement: “We appreciate you reporting this detection miss to us and allowing us to rapidly address this gap on January 11th. We do have a bug bounty program www.hackerone.com/crowdstrike or via…

Virtuailor - IDAPython tool for creating automatic C++ virtual tables in IDA Pro. https://t.co/3XgMMWRdtQ

Alguns meses atrás, escrevi sobre o ataque de DLL Side-Loading, mostrando um exemplo real envolvendo um binário legítimo e digitalmente…