I have come across many security keys from different manufacturers such as solokeys, yubico etc.., for the purposes of 2FA/MFA. Products vary basically w.r.t features such as USB-A, USB-C, Apple connector or NFC. But, I could not still fig…
I have AWS resources (e.g. EC2s, RDS instances) that I would like to isolate from each other so that if one is compromised, the potential damage is limited. I am most concerned about data leakage / exfiltration. I can group these resources…
Over the past several years, Microsoft has rolled out several changes that result in more memory being zeroed. These mitigations include:
The InitAll mitigation which zeros most stack variables Switching most Microsoft kernel code over to the ExAllocat…
I am a little confused on how the token is shared from the client to an AJAX script to the resource server in the oauth2 flow.
To explain the scenario I am trying to set up, I have
a client (http://localhost:3000)
a resource server (http:…
Recently, I came across an issue concerning a daemon named gamecontrollerd in OsX Big Sur.
On my laptop I’m running ReiKey (from Objective-See), which aims at identifying possible Key Loggers that leverage "event taps".
Today I g…
I’m running an Evil Twin attack with airgeddon. Point is that after deauth the account is going, automatically, to get reconnected to the orginal AP and not the fake one.
The aireplay is likes so:
aireplay-ng -0 0 -a [BSSID] wlan0 -c [TARG…
Beginner question here, I don’t seem to be able to wrap my head around the security benefits of the token exchange protocol as specified by RFC8693. To me it seems like a delegation pattern where a webservice (service A) impersonates the …
How someone might run an encoded executable, mp3, or any other file safely in memory after being decrypted.
A use case might be someone trying to make code or a file only usable through their service or software, which is my case, I don’t …
Is there a usage of OpenID Connect (OIDC) that allows for a chain of RP (terminology reference)
user -> RP#1
user <-redirect to chosen OP- RP#1
user -> OP: verifies identity
user <-redirects to RP#2- OP
user -> RP#2
user <…
I am attempting to exploit HEVD kernel driver buffer overflow challenge:
https://github.com/hacksysteam/HackSysExtremeVulnerableDriver
However when running the below code my windows 7 machine doesn’t execute the desired shellcode (assign c…
