Pwn stuff. Contribute to mm0r1/exploits development by creating an account on GitHub.

This article explains the pros & cons of dynamic analysis of malware and how to protect yourself best from the cons by sandboxing.

In this post, we will illustrate the roadmap of a physical penetration test and advise how to successfully infiltrate into a corporate environment. This post should be able to clarify areas of focus for a successful physical engagement with an emphasis on…

An open source script to perform malware static analysis on Portable Executable - GitHub - 0x0be/PEpper: An open source script to perform malware static analysis on Portable Executable

A place for me to store my notes/tricks for Windows Based Systems.

PortSwigger are proud to launch our brand new XSS cheatsheet. Our objective was to build the most comprehensive bank of information on bypassing HTML filters and WAFs to achieve XSS, and to present th

DrSemu - Sandboxed Malware Detection and Classification Tool Based on Dynamic Behavior - secrary/DrSemu

Autonomous vehicles are becoming closer to reality, and the technologies developed to support them have already started hitting the market. I set out to see if I could find any real-world deployments of these systems.

A python module that accepts an HTTP request file and returns a dictionary of headers and post data - xscorp/Burpee

LDAP library for auditing MS AD. Contribute to skelsec/msldap development by creating an account on GitHub.

Penetration testing
Web, Wireless, Network Security

Reverse proxies are servers that sit between clients and web servers, often to increase security, performance, and reliability of web applications. From an attacker’s perspective, reverse proxies can be used to sit between victim users and services of interest…