Unit42 researchers outline the evolution of Satori, a malware family targeting zero-day vulnerabilities in IoT devices
A new full exploit chain for SAP NetWeaver AS JAVA(CVE-2016-2386 + CVE-2016-2388 + CVE-2016-1910 = _admin_password_in_plain_text_)
how document files can achieve remote code execution by using monikers crafted to evade signature-based detection techniques relying on blacklisted CLSIDs, and how these monikers function under the hood.
how I chained two vulnerabilities (an XSS and a CORS misconfiguration) that allowed me to steal Yahoo contacts from a victim's contact book($2,000)
tools mitm6 is a pentesting tool that exploits the default configuration of Windows to take over the default DNS server.
tools Halcyon IDE lets you quickly and easily develop Nmap scripts for performing advanced scans on applications and infrastructures with a range from recon to exploitation capabilities.