In August 2020, we released a blog post about how the Speakeasy emulation
framework can be used to emulate user mode malware such as
shellcode. If you haven’t had a chance, give
the post a read today.
In addition to user mode emulation, Speake…
In August 2020, we released a blog post about how the Speakeasy emulation
framework can be used to emulate user mode malware such as
shellcode. If you haven’t had a chance, give
the post a read today.
In addition to user mode emulation, Speake…
I’ve heard of too many horror stories of people opening a seemingly innocent docx or pptx file that they’ve got from a business partner, only to find out that it had embedded malware inside. What should a security conscious person do if th…
If the OCSP signing is delegated explicitly to another entity and that delegated OCSP responder is compromised, how to revoke the certificate and convey the revocation information to a client? We need CRL for this?
‘Reproducible builds’ ensure that a published app matches the published open source code. This answer gives some great information on it.
But numerous sources1,2 indicate reproducible builds are very difficult (or even impossible) to imple…
TLDR: Trying to execute commands on site thats got a LFI vuln.
So I am making my post request to my vulnerable site and
import requests
header = {
‘User-Agent’:’Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201′,
…
I have a Windows 10 computer with 3 hard drives:
Samsung SSD 850 EVO 1TB (SSD, system drive where Windows 10 is installed, not encrypted yet)
First 3 TB HDD already protected by BitLocker
Second 3 TB HDD already protected by BitLocker
Wh…
How to prevent Chrome to connect addresses from LAN to prevent CSRF attacks like this?
<img src="http://192.168.0.1/some_action">
Info for other browsers is welcome here too.
I have come across many security keys from different manufacturers such as solokeys, yubico etc.., for the purposes of 2FA/MFA. Products vary basically w.r.t features such as USB-A, USB-C, Apple connector or NFC. But, I could not still fig…
I have AWS resources (e.g. EC2s, RDS instances) that I would like to isolate from each other so that if one is compromised, the potential damage is limited. I am most concerned about data leakage / exfiltration. I can group these resources…
