An exposed WP-SHELLSTORM server revealed tools, logs, cloud credentials, and thousands of webshells used in a large website ...

Metasploit is a strong tool used by security experts around the world to find and fix security problems, especially with remote access. This guide shows how to install Metasploit on an Android device ...

The Rapid7-powered Metasploit Framework is the world’s leading penetration testing framework. The Project is a collaboration between the open-source community and Rapid7 to provide a tool for ...

A Python POC for exploiting the Apache Spark Shell Command Injection vulnerability. I saw some other POCs out there but they looked mega sus. This one is clean and simple. I did not discover this ...

These days, I start to have second thoughts about releasing information that could be useful for attackers. So this time I’ll try something different. I will not tell you specifically what we found ...

how a poisoned MS Office document can be used to give a connect-back foothold to an attacker. At 1:57 long it couldn’t really explain the details of such an attack so here is a much more granular look ...

First thing first, we run a quick initial nmap scan to see which ports are open and which services are running on those ports. nmap -sC -sV -O -oA initial 10.10.10.51 Starting Nmap 7.80 ( https://nmap ...