Misconfigurations in S3 Buckets
Hi,Guys
I have recently working on an another project to find leaked data and vulnerable endpoints from an actual running site.I have spotted an Publically accessable AWS S3 bucket in the
Protecting yourself from supply chain attacks, profiling, and slop machines
So recently there was an article regarding Claude Code profiling Chinese nationals (or more specifically timezone profiling) when someone RTFM’d and found out Anthropic was using the TZ setting, if set to
Copying Code to Read Only Memory without Using `mprotect`
When a program needs to generate/retrieve code and run it, several steps are required. The program needs to allocate memory with read, write, and execution permissions, and perhaps remove the write permission
Emulating Kimsuky's Initial Access
When choosing an initial access technique, I am a big fan of LNKs. Studying CTI reports, I noticed the constant recurrence of LNKs as an initial access vector across multiple APTs, including APT28,
Hacking C++ (Part 2)
Bypassing CFI
What CFI Is
Control Flow Integrity (CFI) is a security mitigation that protects against control-flow hijacking attacks by checking if function call is valid. Every compiler has its own implementation