Newly discovered later-stage malware from BlueNoroff APT group targets macOS with characteristics similar to their RustBucket campaign.

During my internship, I have been researching and trying to find bugs within the nftables subsystem. In this blog post, I will talk about a bug I have found, as well as the exploitation of an n-day discovered by Mingi Cho – CVE-2023-31248.
Introduction to…

In which we run a normal ELF binary on Linux without touching the filesystem(except /proc).

The House of Rust is a heap exploitation technique that drops a shell against full PIE binaries that don’t leak any addresses.

Threat Researcher

In detailed Analysis for the Stealc stealer.

Last week (2019-02-11) a new vulnerability in runC was reported by its maintainers, originally found by Adam Iwaniuk and Borys Poplawski. Dubbed

By Seth Jenkins, Project ZeroIntroductionIn December 2022, Google’s Threat Analysis Group (TAG) discovered an in-the-wild exploit chain targeting Samsu...

AhnLab Security Emergency response Center (ASEC) detected circumstances of a malware strain being distributed through breached legitimate websites using various file names, prompting users to run them. This post will introduce how AhnLab EDR analyzes and…

Binary Ninja is a modern reverse engineering platform with a scriptable and extensible decompiler.

Introduction

Vulnerability intelligence that predicts avenues of attack with speed and accuracy.

How to find out someone's phone number if you just know their email address and how it can be automated using a new OSINT tool: email2phonenumber

I analyzed stackoverflow for secrets and leaks.

Porch Pirate is a Postman recon / OSINT client and framework that facilitates the automated discovery and exploitation of API endpoints and secrets committed to public workspaces, collections, requests, users and teams. Porch Pirate can be used as a client…

Zero-day vulnerabilities chain in CrushFTP (CVE-20-23-43177) uncovered by Converge Red Team requires immediate attention with these remediation steps.