World-writable scripts executed as root during Anaconda3 and Miniconda3 installs: CVE-2024-46060 and CVE-2024-46062.

As organizations race to adopt the latest in artificial intelligence (AI), I was looking for a training that addressed AI’s unique attack surface and tested my skills in exploiting large language m...

Active Directory Access Control Lists (ACL), and their associated Access Control Entries (ACE), define the entities and permissions of a specific AD object. If misconfigured, abusing these permissi...

After creating a Batocera live USB for retro gaming, I instantly started down the path of game hacking and researching how ROM’s (digital game copies) could be abused… This post serves as my intro...

One of the many rabbit holes I’ve gone down recently was the use of WiFi to track client devices. While this technique is not new by any means, I recall seeing matt0177’s 2022 Blackhat USA talk whe...

Forget compiling payloads and operating on disk — this post demonstrates the use of Python’s portable interpreter for in-memory malware deployment, even when the language isn’t installed on the hos...