This report is a little different than our typical content. We were able to analyze data from a perspective we typically don’t get to see… a threat actor’s host! In early November…

PowerShell PE Parser. Contribute to jonny-jhnson/PowerParse development by creating an account on GitHub.

CVE-2023-6817, poses a severe threat with a CVSS score of 7.8, categorizing it as a high-severity issue, also PoC exploit published.

The story of CVE-2023-6483, my first CVE and biggest security disclosure yet.

ESET researchers document a series of new OilRig downloaders, all relying on legitimate cloud service providers for C&C communications.

Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.

In part 1 of this two-part series, Akamai researchers explore two new Windows vulnerabilities that could lead to remote code execution against Outlook clients.

A single .exe binary which runs DOOM on DOS 6, Windows 95 and Windows 10 (and probably everything in between). - nneonneo/universal-doom

Kitploit is temporarily under maintenance. We’ll be back shortly with improvements.

In this post, I’ll look at a security-related change in version r40p0 of the Arm Mali driver that was AWOL in the January update of the Pixel bulletin, where other patches from r40p0 was applied, and how these two lines of changes can be exploited to gain…

Prying Deep - An OSINT tool to collect intelligence on the dark web. - iudicium/pryingdeep

Barracuda Networks has faced a formidable challenge with the discovery of two zero-day vulnerabilities, CVE-2023-7102 and CVE-2023-7101

The first of a three part series providing detailed instructions on how to debug a live Linux kernel. In this first part Alex Thorlton provides setup instructions to create an environment that will facilitate playing with the various techniques that will…

As seen in most security blog posts today, binary diffing tools are essential for reverse engineering, vulnerability research, and malware analysis. Patch diffing is a technique widely used to identify changes across versions of binaries as related to security…

We had never seen so many CLFS driver exploits being used in active attacks before, and then suddenly there are so many of them captured in just one year. Is there something wrong with the CLFS driver? Are all these vulnerabilities similar? These questions…

This video is a re-run of my REcon 2018 presentation in Brussels.

Chapters:

00:00 Introduction
01:54 Fun facts
05:35 Presentation

Abstract:

StarCraft 1.16.1 and older had a buffer overflow bug in the map parsing code. The hackers in South Korea leveraged…