OffensiveCon 2024 Repo, contains PoCs and materials for talk "UEFI and the Task of the Translator" - ic3qu33n/OffensiveCon24-uefi-task-of-the-translator

A beginner-friendly journey from a memory corruption to a browser pwn.

Twitch is the world's leading video platform and community for gamers.

Introducing LLM-based harness generation for unfuzzed projects.

We recently had on Daniel Fernandez, one of my co-authors of Gray Hat Hacking 6th Ed... In this continuation on that topic area, join me with special guest "Alan Sguigna" from ASSET InterTech. JTAG debugging on affordable, commercially available Intel targets…

Analysis of a malicious LNK file which uses a compromised Uzbekistan website to launch a malicious HTA file, that in turn downloads and runs FormBook malware.

** Find me at **
Twitter/X - https://twitter.com/CyberRaiju
Blog - https://www.jaiminton.com/
Mastodon…

Retr0's Threat Research

A tale about exploiting KernelCTF Mitigation, Debian, and Ubuntu instances with a double-free in nf_tables in the Linux kernel, using novel techniques like Dirty Pagedirectory. All without even having to recompile the exploit for different kernel targets…

A fully-undetectable ransomware that utilizes OneDrive & Google Drive to encrypt target local files - SafeBreach-Labs/DoubleDrive

The 1.0 RISC-V Vector Specification is now Ratified, and the first pieces of silicon using the new spec are starting to hit the shelves. I go over the utility of Vector Instructions, why you would want them, why you should care, and how to use them in raw…

Contribute to apkunpacker/FridaScripts development by creating an account on GitHub.

This was one of the most challenging crackmes I’ve ever attempted to decipher. It took an extensive amount of time and effort, spanning…

Golang is the most used programming language for developing cloud technologies. Tools such as Kubernetes, Docker, Containerd and gVisor are written in Go. Despite the fact that the code of these programs is open source, there is no way to analyze and extend…

Discovering a zero-day authentication bypass and chaining a .NET deserialization to achieve pre-auth RCE on Progress Report Server