informationsecurity

GitAlerts: Enhancing GitHub Security and Monitoring for Organization Repositories

GitHub has become an important tool for version control and project management in the ever-changing world of software development and…

9 months ago

CVE-2023-6553 Exploit V2

The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.7…

9 months ago

ICSpector: Microsoft’s Open-Source ICS Forensics Framework

Microsoft ICS Forensics Tools framework is an open-source forensics framework that enables the analysis of Industrial PLC metadata and project…

9 months ago

Atlassian Companion RCE Vulnerability Proof of Concept (CVE-2023-22524)

Atlassian Companion for macOS has a serious remote code execution vulnerability that was just found. It is called CVE-2023-22524. This…

9 months ago

ADOKit: Azure DevOps Services Attack Toolkit

Azure DevOps Services Attack Toolkit - ADOKit is a toolkit that can be used to attack Azure DevOps Services by…

9 months ago

CreateToken: Exploiting ZwCreateToken() for SYSTEM Token

In the realm of cybersecurity, understanding and exploiting Windows APIs is pivotal for both defenders and attackers. In this article,…

9 months ago

LDAP Nom Nom: Insane-Speed Active Directory User Enumeration via LDAP Ping Exploitation

With the help of LDAP Ping requests (cLDAP), "LDAP Nom Nom" is a powerful tool that quickly and quietly brute-forces…

9 months ago

Mastering YARA: A Comprehensive Guide to Detection Engineering and Rule Development

Threat identification and analysis are very important for keeping systems and networks safe in the ever-changing world of cybersecurity. YARA…

9 months ago

Photo Location Finder: Using Google Cloud Vision API to Detect Landmarks and Labels in Images

This is a Python code to detect landmarks, labels and web entities in a set of images using Google Cloud…

9 months ago

APIDetector: Uncovering Swagger Endpoint Risks and How to Secure Your API

APIDetector is a powerful and efficient tool designed for testing exposed Swagger endpoints in various subdomains with unique smart capabilities…

9 months ago