data:blog.metaDescription

A malicious LDAP server for JNDI injection attacks - artsploit/rogue-jndi

How PHP’s unserialize() works, and why it leads to vulnerabilities.

CVE-2020-1472: Zerologon Unauthenticated Domain Controller compromise of the computer account password. https://t.co/Qohp5MFe8j https://t.co/yTvyS1Ozgx

A self-hosted Fuzzing-As-A-Service platform. Contribute to microsoft/onefuzz development by creating an account on GitHub.

Introduction In recent years, the gaming industry has grown significantly, especially casino games and sports betting. Online casinos consolidate their position as one of the main sources of entert…

gameoverlay solution for Electron, Qt and CEF, just like discord game overlay and steam game overlay, inject any app to overlay in your game - hiitiger/gelectron

When working with IoT and embedded systems, brute-force password guessing attacks are an effective tool to gain access. Over the years, I’ve learned some tips and tricks to make these attacks…

In this post, you will learn about how I could find the unauthenticated file upload vulnerability in Synology and, according to Synology's highest amount for website security bounty. Start Point to...

Parameter Tampering: Special Characters

Invoke-ZeroLogon allows attackers to impersonate any computer, including the domain controller itself, and execute remote procedure calls on their behalf. - BC-SECURITY/Invoke-ZeroLogon

Applications still utilize weak cryptography generation methodologies which may lead to severe risk. In the world of Application Security, looking for a…

A fast & light web screenshot without headless browser but Chrome DevTools Protocol! - dwisiswant0/go-stare

TL;DR Find out how a use after free vulnerability in PHP allows attackers that are able to run PHP code to escape disable_functions restrictions. Vulnerability Summary PHP’s SplDoublyLinkedList is vulnerable to an UAF since it has been added to PHP’s core…

Testing for XSS via “javascript:” but it’s blocked by a WAF? Try these bypasses. Thanks for the #BugBountyTip, @SecurityMB! #BugBountyTips #HackWithIntigriti