-
XSS : Get string without quote
Sometimes, in JavaScript, we need to create String without using quotes or String.fromCharCode(). Learn how to take advantage from short RegExp...Continue reading →
2 January 2017 1 messages -
TVT DVR/CCTV webshell exploit
This is another exploit implementation for TVT derived DVR/CCTV devices which have a root cmd injection vulnerability. It is based on routersploit framework, it checks...Continue reading →
15 December 2016 0 messages -
My VBA Bot
As other members of CERTs I noticed the revival of VBA malware these past years, especially used to drop ransomwares. To better understand and for the fun, I decided to give a...Continue reading →
11 July 2016 4 messages
-
Bypass Defender and other thoughts on Unicode RTLO attacks
I have been looking a bit into Unicode and Right-To-Left-Override phishing attacks lately. Mainly because I noticed that Windows Defender was detecting payloads generated with the "—unicode-rtlo"... Continue reading →
25 May 2020 0 messages
Search
Most popular
1. VNC to access Kali Linux on Raspberry Pi
2. Fun combining anti-debugging and anti-disassembly tricks
5 random articles
1. Bypass Windows Defender Attack Surface Reduction
3. String encryption using macro and cryptor
4. Setup a buffer overflow testing environment
5. Bypass Antivirus Dynamic Analysis
Sponsor
If you appreciate my work, you may help or reward with a contribution :)
