2024-01-18 // Today, discover tools like noxer for automating Android pentesting in Nox Emulator, sbscan for detecting Spring Framework vulnerabilities, Kaspersky’s iShutdown for spotting iOS spyware, a new Linux kernel exploit for root access, PyGPOAbuse for editing GPOs, an intro to YARA for reverse engineering, a Cobalt Strike BOF for checking DLL hijacking, techniques for reversing obfuscated JavaScript, the versatile Flipper Zero for hacking, AVRed for improving red teaming obfuscation, and Kaspersky’s scripts for iShutdown analysis on iOS. [more...]

2024-01-17 // Today, learn about CloudRecon for SSL certificate-based asset discovery, a script for detecting Ivanti Connect Secure vulnerabilities, explore Web LLM attack techniques, apply Linux hardening techniques, understand crypto drainer risks in account takeovers, use Xeol Scanner to find outdated software, set up Caldera for cyber attack simulations, discover Linikatzv2 for Active Directory attacks, Ken Shirriff’s exploration of the Bendix CADC, and Ivanti’s critical security vulnerabilities requiring immediate mitigation. [more...]