Binary Ninja is a modern reverse engineering platform with a scriptable and extensible decompiler.

Introduction

Vulnerability intelligence that predicts avenues of attack with speed and accuracy.

How to find out someone's phone number if you just know their email address and how it can be automated using a new OSINT tool: email2phonenumber

I analyzed stackoverflow for secrets and leaks.

Porch Pirate is a Postman recon / OSINT client and framework that facilitates the automated discovery and exploitation of API endpoints and secrets committed to public workspaces, collections, requests, users and teams. Porch Pirate can be used as a client…

Zero-day vulnerabilities chain in CrushFTP (CVE-20-23-43177) uncovered by Converge Red Team requires immediate attention with these remediation steps.

A remote unauthenticated DOS POC exploit that targets the authentication implementation of Havoc. - syncwithali/HavocExploit

details about DIAL protocol vulnerabilities . Contribute to yunuscadirci/DIALStranger development by creating an account on GitHub.

We took a look at the security of the most popular code editor, Visual Studio Code! This blog post covers vulnerabilities our researchers discovered in third-party extensions.

Executables with RWX sections can be abused using a variation of a Process Overwriting technique dubbed Process Stomping. Using (a modified) sRDI and leveraging the new features of Cobalt Strike 4.9 has been possible to load beacon in the RWX section itself…

LPE PoC of a vulnerability in the io_uring subsystem of the Linux Kernel. - ysanatomic/io_uring_LPE-CVE-2023-2598

Advisory ID: usd-2023-0025 (CVE-2023-45878) | Product: Gibbon Edu | Vulnerability Type: Arbitrary File Write (CWE-434)

This Blog will show a novel way to avoid detections for Process Injection triggered by ETWti from Kernel.

In this post, we will analyze how Vanguard attempts to keep away bad actors by utilizing a simple yet brutally strong method