When NTB-NS/ARP/LLMNR is disable, you still have DHCP.py in Responder's tools/ folder.

The other day I got bored and decided to do a little PowerShell one-liner on my Windows 10 gaming rig. I wanted to see if I have any DLL’s that are unsigned or invalid in my C:\Windows direct…

In most cases, hackers

In this second installment, I will focus on how to build our own custom ASAN interceptors in order to catch memory bugs when custom memory pools are implemented and also on how to intercept file system syscalls to detect logic errors in the target application.

yes you can

Zero-Click Zip TL;DR

<p>As cheesy as the title sounds, I promise it cannot beat the cheesiness of the technique I’ll be telling you about in this post. The morning I saw Mark Ermolov’s tweet about the undocume

This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

Our users deliver software to us as Docker containers, but we don’t use Docker to run them. We transmogrify container images into Firecracker micro-VMs. Here's how.

By default, domain joined Windows workstations allow access to the network selection UI from the lock screen.

An attacker with physical access to a locked device with WiFi capabilities (such as a laptop or a workstation) can abuse this functionality to force…

Would you prefer to watch this as a video instead? See the video I made on Linux sudo LD_PRELOAD privilege escalation!

PoC for UUID shellcode execution using DInvoke. Contribute to ChoiSG/UuidShellcodeExec development by creating an account on GitHub.

Automated All-in-One OS Command Injection Exploitation Tool - commixproject/commix