Search: [security]

At Home In Your Firmware: Analysis of CVE-2024-36877

uefi · security · hack

March 21, 2026 at 09:24:15 UTC * · permalink

·

https://jjensn.com/at-home-in-your-firmware/

CVE-2024-9956 - PassKey Account Takeover in All Mobile Browsers | Tobia Righi - Security Researcher

fido · webauth · security · hacking

March 21, 2025 at 19:04:27 UTC * · permalink

·

https://mastersplinter.work/research/passkey/

GymTok: Breaking TLS Using the Alt-Svc Header

security · tls · mitm

February 28, 2025 at 09:31:52 UTC * · permalink

·

https://blog.pspaul.de/posts/gymtok-breaking-tls-with-alt-svc/

Splitting the email atom: exploiting parsers to bypass access controls | PortSwigger Research

email · security

January 26, 2025 at 15:28:51 UTC * · permalink

·

https://portswigger.net/research/splitting-the-email-atom

GitHub - chainguard-dev/bincapz: enumerate binary capabilities, including malicious behaviors

security · binary

March 15, 2024 at 13:04:33 UTC * · permalink

·

https://github.com/chainguard-dev/bincapz

The Six Dumbest Ideas in Computer Security

security

July 25, 2023 at 09:52:20 UTC * · permalink

·

http://www.ranum.com/security/computer_security/editorials/dumb/

Process injection: breaking all macOS security layers with a single vulnerability · Sector 7

security · macosx

October 4, 2022 at 08:46:52 UTC * · permalink

·

https://sector7.computest.nl/post/2022-08-process-injection-breaking-all-macos-security-layers-with-a-single-vulnerability/

Security List 🔐

security

April 6, 2022 at 13:47:10 UTC * · permalink

·

https://security-list.js.org/#/README

Put an io_uring on it: Exploiting the Linux Kernel - Blog | Grapl

linux · security · exploit · iouring

March 9, 2022 at 09:46:55 UTC * · permalink

·

https://www.graplsecurity.com/post/iou-ring-exploiting-the-linux-kernel

Protected Mode Segmentation as a powerful anti-debugging measure | j00ru//vx tech blog

cpu · security · debug

March 4, 2022 at 10:37:33 UTC * · permalink

·

https://j00ru.vexillium.org/2011/06/protected-mode-segmentation-as-a-powerful-anti-debugging-measure/

GitHub - trickest/cve: Gather and update all available and newest CVEs with their PoC.

cve · security

February 17, 2022 at 11:06:12 UTC * · permalink

·

https://github.com/trickest/cve

Introduction - OWASP Cheat Sheet Series

security cheatsheet

security

March 14, 2021 at 10:42:31 UTC * · permalink

·

https://cheatsheetseries.owasp.org/index.html

Hacking with Environment Variables

script · interpreter · security

July 14, 2020 at 08:12:11 UTC * · permalink

·

https://www.elttam.com/blog/env/

Fixing the Desktop Linux Security Model - News - Whonix Forum

security · linux

March 28, 2020 at 23:10:24 UTC · permalink

·

https://forums.whonix.org/t/fixing-the-desktop-linux-security-model/9172

In-Memory-Only ELF Execution (Without tmpfs) Mrs Quis Will Think of a Better Title

security · elf · inmemory · execution

October 3, 2019 at 16:57:40 UTC · permalink

·

https://magisterquis.github.io/2018/03/31/in-memory-only-elf-execution.html

QEMU VM Escape | bi0s

qemu · security · exploit

August 26, 2019 at 11:00:25 UTC · permalink

·

https://blog.bi0s.in/2019/08/24/Pwn/VM-Escape/2019-07-29-qemu-vm-escape-cve-2019-14378/

GTFOBins

Unix binary evasion command

security · hack · ring0

April 17, 2019 at 10:14:25 UTC · permalink

·

https://gtfobins.github.io/#+file%20write

SSRF Url parser bypass

curl · security · parser · hack

April 14, 2019 at 16:26:55 UTC * · permalink

·

https://www.blackhat.com/docs/us-17/thursday/us-17-Tsai-A-New-Era-Of-SSRF-Exploiting-URL-Parser-In-Trending-Programming-Languages.pdf

PortSwigger Web Security Blog: Cracking the Lens: Targeting HTTP's Hidden Attack-Surface

web · security · hacking · host

July 29, 2017 at 19:44:42 UTC * · permalink

·

http://blog.portswigger.net/2017/07/cracking-lens-targeting-https-hidden.html?m=1

Shared thoughts after 6+ years in Pentesting - Inspiration - 0x00sec - The Home of the Hacker

pentest · security · tools

June 26, 2017 at 10:53:08 UTC * · permalink

·

https://0x00sec.org/t/shared-thoughts-after-6-years-in-pentesting/2492