Type: Threat AnalysisREvil/Sodinokibi RansomwareThe REvil (also known as Sodinokibi) ransomware was used by the financially motivated GOLD SOUTHFIELD threat group, which distributes ransomware via exploit kits, scan-and-exploit techniques, RDP servers,…
According to this page and site, small files are kept in Master File Table when filesystem is NTFS.
Let’s assume that computer is using Windows 10 and a SSD drive with TRIM support. If a user manually deletes a file smaller than 1kb from…
How can a static ECC public key be authenticated when being shared between the client (who has just created the static ECC public key) and the CA (Certification Authority) – who will sign and send the client’s static public key to another …
I have the following code,
<li data-type=”test” title=”?”> test </li>
Following values were Not allowed
<>&*#%\'”=
My goal here is to get a javascript popup to appear.
is there a way to make an alert popup?
Ex…
In the past year we invested a lot of time making Hyper-V research more accessible to everyone. Our first blog post, “First Steps in Hyper-V Research”, describes the tools and setup for debugging the hypervisor and examines the interesting attack surfa…
I am trying to deauth my laptop which is connected to my home wifi. aireplay-ng has no effect on my laptop.
The commands I used are in order airmon-ng start wlan0 then after getting the mac address of the access point and my laptop i use …
I’m trying to exploit a buffer overflow vulnerability in MIPS architecture. ASLR is enable, but the binary compiled without PIE (hence loaded always to 0x00400000). However, the vulnerable code uses strcpy, so I cannot overwrite the $ra re…
Background: We’re developing for a Debian 9.8 system on an x86, but most of us here are more used to dealing with embedded devices.
according to wikipedia, secure boot can “secure the boot process by preventing the loading of drivers or …
Malware analysts routinely use the Strings
program during static analysis in order to inspect a binary’s
printable characters. However, identifying relevant strings by hand is
time consuming and prone to human error. Larger binaries produce
upw…
Malware analysts routinely use the Strings
program during static analysis in order to inspect a binary’s
printable characters. However, identifying relevant strings by hand is
time consuming and prone to human error. Larger binaries produce
upw…
