CVE-2021-44228 - Log4j - Minecraft Vulnerable and So Much More
Comprehensive exploration of the Log4j vulnerability, including demonstrations of exploits in Minecraft, industry responses, and defensive strategies.
BurpSuite Extensions
Explore popular BurpSuite extensions for advanced web security testing, including Request Smuggler, Logger++, J2EEScan, and JWT Attacker, to enhance your hacking capabilities.
Custom Java Deserialization Exploit - Serial Snyker
Explore Java deserialization vulnerabilities and create custom exploits for remote code execution in this hands-on tutorial, featuring practical examples and step-by-step guidance.
El Bug de la Semana - Remote Code Execution in CDNJS of Cloudflare
Análisis detallado de una vulnerabilidad de ejecución remota de código en cdnjs de Cloudflare, con Joel Noguera. Exploración técnica y reflexiones sobre el impacto en la seguridad web.
A Journey Finding Pre and Post-Auth D-Link Router Zero-Days
Explora el proceso de descubrimiento y explotación de vulnerabilidades 0-day en routers D-Link, desde obtener acceso al firmware hasta identificar y explotar fallos de seguridad para lograr ejecución remota de código.
Bypassing Endpoint Controls Using Office Macros - Techniques and Defenses
Explore techniques for bypassing endpoint controls using Office macros, including crafting malicious documents, establishing C&C channels, and evading detection through advanced attack methods.
Solving the Pickle Rick CTF - Walkthrough and Techniques
Step-by-step walkthrough of solving the Pickle Rick CTF challenge, covering scanning, enumeration, exploitation, and privilege escalation techniques for ethical hacking practice.
Trusted Execution: A Deterministic Approach to AppSec for Zero-Day Threat Prevention - 2016
Explore Trusted Execution, a novel approach to application security that promises zero-day threat prevention through granular memory-level visibility and context, eliminating false positives in advanced security threats.
Security Begins with Secure Development Environments
Explore supply chain security threats in development environments, focusing on vulnerabilities in Visual Studio Code extensions and their potential for remote code execution.
Unveiling the Hidden - Discovering RDP Vulnerabilities Using PDF Files
Innovative OSINT techniques reveal critical RDP vulnerabilities, including remote code execution and security bypasses, without conventional reverse engineering tools. Explore unconventional research methodologies and vulnerability analysis.
Remotely Exploiting the ClamAV Antivirus Engine - CVE-2023-20032 Case Study
Explore a case study on exploiting CVE-2023-20032 in ClamAV, demonstrating remote code execution and ASLR bypass techniques applicable to similar antivirus software vulnerabilities.
Exploiting the Lexmark PostScript Stack
Explore Lexmark PostScript stack exploitation, covering internals, language basics, mitigations, and achieving remote code execution through out-of-bounds read and type confusion vulnerabilities.
How to Hack WordPress - Exploiting Plugins - Part 2
Learn to exploit WordPress plugins through lab setup, enumeration techniques, and remote code execution in this hands-on cybersecurity tutorial.
Learn to Hack Live - Remote Code Execution in WebApps
Explore remote code execution vulnerabilities in web applications, enhancing your ethical hacking skills and understanding of cybersecurity threats.
Log4J Vulnerability (Log4Shell) - Exploitation and Mitigation
Exploración detallada de la vulnerabilidad Log4Shell en Log4J, demostrando técnicas de explotación y mitigación en Apache Solr. Incluye explicación del impacto y gravedad de esta falla crítica de seguridad.
Abusing Linux In-Kernel SMB Server to Gain Kernel Remote Code Execution
Explore Linux kernel vulnerabilities and gain insights into exploiting the in-kernel SMB server for remote code execution.
Escaping Modern Web-Based App Sandboxes - Site Isolation Vulnerabilities
Explore Chrome's site isolation vulnerabilities in web-based apps, revealing how attackers can bypass security measures to execute malicious actions and compromise user data.
Implicit and Mutation-Based Serialization Vulnerabilities in .NET
Explores novel .NET serialization attacks bypassing current mitigations, demonstrating vulnerabilities in popular platforms and offering detection and mitigation techniques for developers.
The Critical Path to Implant Backdoors and Potential Mitigation Techniques: Learnings from XZ Utils
Analyze the critical attack path of XZ Utils backdoor and explore mitigation strategies for supply-chain attacks in open-source software.
ShellTorch - The Next Evolution in *4Shell Executions
Uncover ShellTorch vulnerabilities in TorchServe, enabling remote code execution and AI model manipulation. Learn about the high-severity exploit's impact on PyTorch ecosystem and essential mitigation strategies.
LLM4Shell - Discovering and Exploiting RCE Vulnerabilities in LLM-Integrated Frameworks
Uncover critical RCE vulnerabilities in LLM-integrated frameworks and apps. Learn automated exploitation methods, potential impacts, and essential mitigation strategies for securing AI-powered systems.