|
Article: HITB2014AMS – Day 2 – Keynote 4: Hack It Forward - published over 12 years ago. Content: Good morning Amsterdam, good morning readers, welcome to the second day of the Hack In The Box conference. The speaker for the first keynote didn’t show up, so we’ll jump right into the next keynote. Jennifer starts her keynote by explaining that she’s fortunate to be able to travel to a lot of conferences and meet a lot of amazing people. When talking to p... https://www.corelan.be/index.php/2014/05/30/hitb2014ams-day-2-keynote-4-hack-it-forward/ Published: 2014 05 30 08:32:09 Received: 2026 03 07 08:26:41 Feed: Corelan Team Source: Corelan Team Category: News Topic: Hacking |
|
Article: HITB2014AMS – Day 2 – Exploring and Exploiting iOS Web Browsers - published over 12 years ago. Content: iOS Browsers & UIWebview iOS is very popular (according to StatCounter, it’s the 3rd most popular platform used). Mobile browsers take about 20% to 25% of the market share. iOS offers integration with desktop browsers and cloud (so the same data is available to an attacker). Many 3rd party IOS browsers have similar weaknesses which are sitll copied to ... https://www.corelan.be/index.php/2014/05/30/hitb2014ams-day-2-exploring-and-exploiting-ios-web-browsers/ Published: 2014 05 30 10:19:05 Received: 2026 03 07 08:26:41 Feed: Corelan Team Source: Corelan Team Category: News Topic: Hacking |
|
|
Article: HITB2014AMS – Day 2 – On Her Majesty’s Secret Service: GRX & A Spy Agency - published over 12 years ago. Content: Last year, Belgacom got hacked by an intelligence service (GCHQ?), Rob says. “What is so interesting about this hack, why did they hack into Belgacom, what would or could be the purpose of a similar hack?” Before answering those questions, we need to take a quick look on how mobile networks work and how mobile data travels the network. Mobile data In a mo... https://www.corelan.be/index.php/2014/05/30/hitb2014ams-day-2-on-her-majestys-secret-service-grx-a-spy-agency/ Published: 2014 05 30 13:13:22 Received: 2026 03 07 08:26:41 Feed: Corelan Team Source: Corelan Team Category: News Topic: Hacking |
|
|
Article: CSO : Common Sense Operator/Operations - published over 12 years ago. Content: As the CSO/CISO/person responsible for Information Security, your job is to… well … do you even know? Does upper management know? "Our crappy CSO <this>…" and "Our stupid CSO <that>…" are statements commonly used by various (techie) people, throwing their hands up in despair, attempting to prove that their CSO doesn’t understand technology an... https://www.corelan.be/index.php/2014/06/03/cso-common-sense-operatoroperations/ Published: 2014 06 03 08:05:09 Received: 2026 03 07 08:26:41 Feed: Corelan Team Source: Corelan Team Category: News Topic: Hacking |
|
Article: Analyzing heap objects with mona.py - published about 12 years ago. Content: Introduction Hi all, While preparing for my Advanced exploit dev course at Derbycon, I’ve been playing with heap allocation primitives in IE. One of the things that causes some frustration (or, at least, tends to slow me down during the research) is the ability to quickly identify objects that may be useful. After all, I’m trying to find objects that contai... https://www.corelan.be/index.php/2014/08/16/analyzing-heap-objects-with-mona-py/ Published: 2014 08 16 15:09:22 Received: 2026 03 07 08:26:41 Feed: Corelan Team Source: Corelan Team Category: News Topic: Hacking |
|
|
Article: How to become a pentester - published about 11 years ago. Content: Intro I receive a lot of emails. (Please don’t make it worse, thanks!) Unfortunately I don’t have as much spare time as I used to, or would like to, so I often have no other choice than to redirect questions to our forums or our IRC channel (#corelan on freenode), hoping that other members of the community will jump in and help me answer those questions. ... https://www.corelan.be/index.php/2015/10/13/how-to-become-a-pentester/ Published: 2015 10 13 12:30:35 Received: 2026 03 07 08:26:41 Feed: Corelan Team Source: Corelan Team Category: News Topic: Hacking |
|
|
Article: Crypto in the box, stone age edition - published almost 11 years ago. Content: Introduction First of all, Happy New Year to everyone! I hope 2016 will be a fantastic and healthy year, filled with fun, joy, energy, and lots of pleasant surprises. I remember when all of my data would fit on a single floppy disk. 10 times. The first laptops looked like (and felt like) mainframes on wheels and the entire internet could probably be stored o... https://www.corelan.be/index.php/2016/01/06/crypto-in-the-box-stone-age-edition/ Published: 2016 01 06 11:55:33 Received: 2026 03 07 08:26:40 Feed: Corelan Team Source: Corelan Team Category: News Topic: Hacking |
|
Article: EncFSGui – GUI Wrapper around encfs for OSX - published over 10 years ago. Content: Introduction 3 weeks ago, I posted a rant about my frustration/concern related with crypto tools, more specifically the lack of tools to implement crypto-based protection for files on OSX, in a point-&-click user-friendly way. I listed my personal functional and technical criteria for such tools and came to the conclusion that the industry seem to think... https://www.corelan.be/index.php/2016/01/31/encfsgui-gui-wrapper-around-encfs-for-osx/ Published: 2016 01 31 21:08:51 Received: 2026 03 07 08:26:40 Feed: Corelan Team Source: Corelan Team Category: News Topic: Hacking |
|
|
Article: Windows 10 x86/wow64 Userland heap - published over 10 years ago. Content: Introduction Hi all, Over the course of the past few weeks ago, I received a number of "emergency" calls from some relatives, asking me to look at their computer because "things were broken", "things looked different" and "I think my computer got hacked". I quickly realized that their computers got upgraded to Windows 10. We could have a lengthy discussion ... https://www.corelan.be/index.php/2016/07/05/windows-10-x86wow64-userland-heap/ Published: 2016 07 05 21:59:38 Received: 2026 03 07 08:26:40 Feed: Corelan Team Source: Corelan Team Category: News Topic: Hacking |
|
|
Article: Windows 10 egghunter (wow64) and more - published over 7 years ago. Content: Introduction Ok, I have a confession to make, I have always been somewhat intrigued by egghunters. That doesn’t mean that I like to use (or abuse) an egghunter just because I fancy what it does. In fact, I believe it’s a good practise to try to avoid egghunters if you can, as they tend to slow things down. What I mean, is that I have been fascinated by techn... https://www.corelan.be/index.php/2019/04/23/windows-10-egghunter/ Published: 2019 04 23 13:30:20 Received: 2026 03 07 08:26:40 Feed: Corelan Team Source: Corelan Team Category: News Topic: Hacking |
|
Article: 38 researchers red-teamed AI agents for 2 weeks. Here's what broke. (Agents of Chaos, Feb 2026) AI Security - published 7 months ago. Content: A new paper from Northeastern, Harvard, Stanford, MIT, CMU, and a bunch of other institutions. 38 researchers, 84 pages, and some of the most unsettling findings I have seen on AI agent security. The setup: they deployed autonomous AI agents (Claude Opus and Kimi K2.5) on isolated servers using OpenClaw. Each agent had persistent memory, email accounts, Dis... https://www.reddit.com/r/netsec/comments/1rn4b6i/38_researchers_redteamed_ai_agents_for_2_weeks/ Published: 2026 03 07 08:02:18 Received: 2026 03 07 08:03:01 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
Click to Open Code Editor