Linux Reverse Shell in x86 Assembly : rootfu.in/linux-revers...

300 Milliseconds to Admin: Mastering DLL Hijacking and Hooking to Win the Race (CVE-2025-24076 and CVE-2025-24994) : blog.compass-security.com/2025/04/3-mi...

Bypassing kASLR via Cache Timing : r0keb.github.io/posts/Bypass... kASLR Internals and Evolution : r0keb.github.io/posts/kASLR-... credits @r0keb

Cache poisoning via race-condition in Next.js : zhero-web-sec.github.io/research-and... credits @zhero___

O2 VoLTE : Locating any customer with a phone call : mastdatabase.co.uk/blog/2025/05...

Bypassing Web Filters (Part 4) : Host Header Spoofing & Domain Fronting Detection Bypasses : blog.compass-security.com/2025/03/bypa... 3 : Domain Fronting : blog.compass-security.com/2025/03/bypa... 2 : Host Header Spoofing : blog.compass-security.com/2025/03/bypa...

Game Hacking : Part 1 - Land Of The PEB - Modules and DLLs : codeneverdies.github.io/posts/lotp-1/ Part 2 : Running from the debugger : codeneverdies.github.io/posts/lotp-2/ Part 3: BakkesMod : codeneverdies.github.io/posts/gh-1/ 4 : Valve Anti-Cheat (VAC) : codeneverdies.github.io/posts/gh-2/

0-click RCE on Tesla Model 3 through TPMS Sensors : www.synacktiv.com/sites/defaul... credits @masthoon @vdehors

PE32 Ransomware : A New Telegram-Based Threat on the Rise : any.run/cybersecurit... credits @MauroEldritch

Evolution of Tycoon 2FA Defense Evasion Mechanisms : Analysis and Timeline : any.run/cybersecurit...

HTML to PDF Renderer : A tale of local file access and shellcode execution : neodyme.io/en/blog/html...

Fileless Execution : PowerShell Based Shellcode Loader Executes Remcos RAT : blog.qualys.com/vulnerabilit...

Breaking up-to-date Windows 11 BitLocker encryption -- on-device but software-only : neodyme.io/en/blog/bitl...

Researchers Expose New Intel CPU Flaws Enabling Memory Leaks and Spectre v2 Attacks : ethz.ch/en/news-and-... Ref : *Speculative calculations open a backdoor to information theft (*2022) : ethz.ch/en/news-and-... RETBLEED : www.usenix.org/system/files...

Mastering Rate Limit Bypass Techniques : infosecwriteups.com/mastering-ra...

Hacking Casino - How Math Beats the Casino Odds : www.youtube.com/watch?v=87Fg... Shuffle Up and Deal: Analyzing the Security of Automated Card Shufflers : i.blackhat.com/BH-US-23/Pre... How To Rob a Casino : 0x00sec.org/t/how-to-rob...

Writing a Self-Mutating Malware : 0x00sec.org/t/writing-a-... Metamorphic Code Examples : stackoverflow.com/questions/10...

How To Rob a Casino : 0x00sec.org/t/how-to-rob...

macOS Malware Development (Part 2) : 0x00sec.org/t/macos-malw... Part 1 : 0x00sec.org/t/macos-malw... Ref : Inside a Hello World executable on OS X : adrummond.net/posts/macho The Mystery of Mach-O Object Structure : alexdremov.me/mystery-of-m... www2.cs.arizona.edu/~collberg/Te...

Fuzzing Windows ARM64 closed-source binary : www.romainthomas.fr/post/25-04-w...

Litterbox : Sandbox approach for malware developers and red teamers to test payloads against detection mechanisms before deployment : github.com/BlackSnufkin...

Pupkin : a deceptively simple .NET-based stealer designed to harvest browser passwords, Discord tokens, and Telegram sessions — all controlled silently through a Telegram C2 : muff-in.github.io/blog/pupkin-...

Linux running in Excel : github.com/NSG650/Linux...

felix86 : Run x86-64 programs on RISC-V Linux : github.com/OFFTKP/felix86

LigerLabs - Educational Modules for (Anti-)Reverse Engineering : ligerlabs.org

Attacking My Landlord's Boiler : blog.videah.net/attacking-my...

How I Found Malware in a BeamNG Mod : lemonyte.com/blog/beamng-...

How I made $64k from deleted files — a bug bounty story : medium.com/@sharon.briz...

How a Single Line Of Code Could Brick Your iPhone : rambo.codes/posts/2025-0...

AirBorne : Wormable Zero-Click RCE in Apple AirPlay Puts Billions of Devices at Risk : www.oligo.security/blog/airborne

VectorKernel : PoCs for Kernelmode rootkit techniques research or education (Currently focusing on Windows OS. All modules support x64 family 64bit OS only) : github.com/daem0nc0re/V... credits @daem0nc0re

Digital Forensics Lab : Free hands-on digital forensics labs for students and faculty : github.com/frankwxu/dig...

tpotce : T-Pot - The All In One Multi Honeypot Platform : github.com/telekom-secu...

JS-Tap : JavaScript payload and supporting software to be used as XSS payload or post exploitation implant to monitor users as they use the targeted application : github.com/hoodoer/JS-Tap Details : Weaponizing JavaScript for Red Teams : trustedsec.com/blog/js-tap-...

Ghosting-AMSI : AMSI Bypass via RPC Hijack (NdrClientCall3) : github.com/andreisss/Gh...

Yet Another NodeJS Backdoor (YaNB) : A Modern Challenge : www.trustwave.com/en-us/resour...

Right-Click Execution - A Tale of Windows LNK NTLM Leak : zeifan.my/Right-Click-... Warm up : Windows LNK - Analysis & Proof-of-Concept : zeifan.my/Windows-LNK/

cuddlephish : Weaponized multi-user browser-in-the-middle (BitM) for penetration testers : github.com/fkasler/cudd... Details : link.springer.com/article/10.1... credits @FKasler

Fuzzing Windows ARM64 closed-source binary with QBDI and libFuzzer : www.romainthomas.fr/post/25-04-w...

Pwning the Ladybird browser : jessie.cafe/posts/pwning...

Pwning the Ladybird browser : jessie.cafe/posts/pwning...

Linux Kernel Exploitation (CVE-2025-21756) : Attack of the Vsock : hoefler.dev/articles/vso... Source code for the exploit : github.com/hoefler02/CV...

Drag and Pwnd : Leverage ASCII characters to exploit VS Code : portswigger.net/research/dra... credits @d4d89704243 ActiveScan++ : github.com/albinowax/Ac... Ref : WorstFit : Unveiling Hidden Transformers in Windows ANSI! : blog.orange.tw/posts/2025-0... credits @orange_8361

How I Got Hacked : A Warning about Malicious PoCs : chocapikk.com/posts/2025/s... Full Dump : chocapikk.com/ioc/s1nk.zip credits @Chocapikk_

Zig Strike: The ultimate toolkit for payload creation and evasion : kpmg.com/nl/en/home/i... ZigStrike : a powerful Payload Delivery Pipeline (developed in Zig) offering a variety of injection techniques and anti-sandbox features : github.com/0xsp-SRD/Zig...

NativeTokenImpersonate - a tool to impersonate users by stealing their tokens using only NTAPI functions : ricardojoserf.github.io/nativetokeni... Impersonate Tokens using only NTAPI functions : github.com/ricardojoser... credits @RicardoJoseRF

Doppelganger : Cloning and Dumping LSASS to Evade Detection using RTCore64.sys, NtCreateProcessEx and MiniDumpWriteDump : vari-sh.github.io/posts/doppel...

Bypassing AMSI with Dynamic API Resolution in PowerShell : rootfu.in/bypassing-am...

Deploy Hidden Virtual Machine For VMProtections Evasion And Dynamic Analysis : r0ttenbeef.github.io/Deploy-Hidde... credits @c_midnight1337

Detecting C2-Jittered Beacons with Frequency Analysis : www.diegowritesa.blog/2025/04/dete...