Cybersecurity news — data breaches, vulnerability disclosures, AI-powered security tools, threat intelligence, and enterprise security research.
This article provides a tutorial for patching Android APKs using the tools apk-mitm and APKLab, including support for bundle APKs (multiple APK files). It outlines steps to extract, decompile, edit, rebuild, and sign APK…
This article provides a curated list of resources for learning assembly language, reverse engineering, malware analysis, and game hacking. It includes links to YouTube playlists, tutorials, documentation, and GitHub repo…
The article describes a shell script (`clean_pdf.sh`) that recursively finds PDF files in a specified directory (or the current directory) and strips their top-level metadata using `exiftool` and `qpdf`. The script creat…
The article is a technical writeup of a CTF challenge involving a PlayStation 1 executable. The author explains how they used dynamic analysis and emulation to reverse-engineer the program, discovering that pressing spec…
The GlobalProtect VPN client for Mac lacks a standard exit option, allowing it to continuously collect system data like patches and interface information even when disconnected from the company network. It notes that the…
The GitHub repository "AppSecEzine" by Simpsonpt compiles a list of URLs (from issue 1 to 309) linking to various application security (AppSec) resources, including articles, tools, and vulnerability disclosures. The col…
The Hex team has launched **diff.hex.pm**, a free web-based tool that generates highlighted git diffs for any Hex package version range directly in a browser. Designed to improve supply chain security, the service allows…
This article provides instructions for activating a Windows Server edition using a Key Management Service (KMS) server. It lists command-line steps using DISM and slmgr tools to change the product edition, install a prod…
The article provides a cheatsheet of Google search operators and "dork" queries used to find specific types of files and directories, such as unsecured media files, documents, and configuration files. It includes example…
This article provides step-by-step instructions for installing a Ghidra server on Ubuntu 18.04.2 LTS. The process involves installing the Java JDK, creating a dedicated system user, and configuring the server software wi…
This README file explains that the provided script cannot use `YAML.dump(payload)` to generate a useful payload, as it only produces a worthless YAML representation of a `Gem::Requirement` object. Instead, the script is …
This article is a compiled database file for PEiD, a popular software tool used to identify packers, cryptors, and compilers in executable files. The file merges three separate "userdb.txt" sources into one comprehensive…
The article provides a step-by-step guide for completely uninstalling Wireshark from a macOS system. The instructions include removing the application, support files, command-line scripts, launch daemon, and system confi…
The article lists IT internship programs offered by major Russian companies, including Yandex, Sberbank, VK, Tinkoff, Ozon, and Avito. Each company provides opportunities in various fields such as software development, d…
The article describes a PowerShell function called `Get-KerberosAESKey` that generates Kerberos AES 128/256 encryption keys from a known password, salt (comprising the Kerberos realm and username/hostname), and iteration…
In August 2024, Authy discontinued its desktop app, and subsequent backend changes have prevented users from logging into older versions, making token export difficult for those not already logged in. This guide provides…
The article provides a list of ephemeral file sharing services and recommends encrypting files locally before uploading, even if the service is trusted. It includes a brief tutorial on using OpenSSL to encrypt files with…
The article contains the source code for an HTML file that implements a button to initiate an OAuth 2.0 authentication flow with Microsoft Azure Active Directory (AAD). The script constructs a URL to Microsoft's login en…
Based on the data from wigle.net, the most common SSID name is "xfinitywifi," followed by "linksys" and "<no ssid>." The list also features many default network names from popular router manufacturers like NETGEAR, D-Lin…
This article provides a curated list of computer science resources, including books and PDFs, covering topics from basic computer hardware and software principles to advanced subjects like compilers, operating systems, a…