Re @MorboAalst

Re @5h3r1ock

Re @muthumohan12 Pure evil!

You visit your best friends 👯‍♀️ Their mom lets you in 💃🏻 You don't find them but you see that their computer is unlocked 💻 What do you...

Re @beginnbounty Thank you! 🤩🙏🏾

FindFunc - Advanced Filtering/Finding of Functions in IDA Pro

SMB Session Spoofing: create a fake SMB Session

Malware-Infested Smart Card Reader

Google shut down caching servers at two Russian ISPs

Critical 'Pantsdown' BMC Vulnerability Affects QCT Servers Used in Data Centers

Experts Warn of Rise in ChromeLoader Malware Hijacking Users' Browsers

Burp Suite 2022.5 released to the Early Adopter channel. Burp Scanner can now detect a number of JWT-based vulnerabilities, and the BApp Store now pro...

CVE-2021-42860 A stack buffer overflow exists in Mini-XML v3.2. When inputting an unformed XML string to the mxmlLoadString API, it will cause a stack...

CVE-2021-40317 Piwigo 11.5.0 is affected by a SQL injection vulnerability via admin.php and the id parameter.

CVE-2021-42859 A memory leak issue was discovered in Mini-XML v3.2 that could cause a denial of service.

CVE-2021-42692 There is a stack-overflow vulnerability in tinytoml v0.4 that can cause a crash or DoS.

CVE-2022-1664 Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a direc...

Re @JaneidyEve @stevenmarkryan If I were to own Twitter, it would be geared towards the middle 80% of the population, so technically the far left and ...

RT Iain Smart: Absolutely delighted to say that I'll be presenting @NCCGroupInfosec's research into CI/CD attacks along with @wucpi at @BlackHatEvents...

Re @vxugpassword Very cool, thanks

还记得 Windows 8 的用户界面吗？当时微软完全不顾软硬件的发展阶段，非常激进地一把梭 Metro。而伴随着 Windows 辉煌了几十年的开始菜单，说丢就丢掉了。改完之后，用户怨声载道，骂声一片。微软自然也收到了反馈。那么，亡羊补牢，出个补丁包把开始菜单加回来？绝、对、不、行。这么加回来，就等于 ...全文

乌龟缸升级，加上喷泉⛲️，晒台，换上大溪石

韩国片《恐怖直播》，电台主持尹英华直播时收到自称朴鲁圭的人打入热线，扬言炸掉汉江大桥。尹英华以为是诈，故意激惹对方，结果话音刚落，窗外大桥发生爆炸。设定上有很多不合理，但想表达的东西很清楚，对万恶的资本主义官僚ZF进行了无情控诉。个人特别喜欢最后那个结局。

Re @msPartner your portal is garbage.

offensive azure: Collection of offensive tools targeting Microsoft Azure

Security Code Audit - For Fun and Fails

Exploiting Leaked Handles for LPE

Malware Triage Tips: How To Stop Wasting Time in IDA On Packed Samples [OALABS Twitch Clip]

Automating Azure Abuse Research — Part 1

Darknet market Versus shuts down after hacker leaks security flaw

CRLFsuite: Fast CRLF injection scanning tool

VirtualBox leaks host ring 0 SIMD registers into guest ring 3

Verizon: Ransomware sees biggest jump in five years

Manipulating Machine-Learning Systems through the Order of the Training Data

The printer goes brrrrr!!!

Tails 5.0 Linux users warned against using it "for sensitive information"

How Secrets Lurking in Source Code Lead to Major Breaches

Lumos System Can Find Hidden Cameras and IoT Devices in Your Airbnb or Hotel Room

Frida-Ios-Hook - A Tool That Helps You Easy Trace Classes, Functions, And Modify The Return Values Of Methods On iOS Platform

FTC fines Twitter $150M for using 2FA info for targeted advertising

Zoom RCE via "xmpp stanza smuggling"

Ransomware grounds some flights at Indian budget airline SpiceJet

Secure Code Review -1 | Cheat sheet For Security Vulnerability In Python — Injection Flaws

Amart Furniture - 108,940 breached accounts

Millions of people's info stolen from MGM Resorts dumped on Telegram for free

RT 张惠倩: CVE-2022-1609 WordPress Weblizar Backdoor $ curl -s -d 'blowfish=1' -d "blowf=system('id');" 'http://localhost:8888/wp-json/am-member/licen...

Re @defparam Thanks a lot for the explanation! I'll try (again) a bit later!

Re @defparam Looks super interesting. Noob question probably (sorry): How would you use this practically? Like what buttons to click to get it to list...

RT Evan 🇺🇦: Example of using Turbo Intruder in a "listen and attack" mode. A hidden secret: you can have turbo intruder scripts use the burp plu...