c99.php : A backdoored backdoor
C99 is a PHP webshell. Attackers uploads it on web server in order to get information and above all execute commands with web user privileges (ex: www-data). This webshell is protected by a customizab
C99 is a PHP webshell. Attackers uploads it on web server in order to get information and above all execute commands with web user privileges (ex: www-data). This webshell is protected by a customizab
Jose Carlos Norte, security researcher, wrote a post detailing how Tor Browser users can be uniquely fingerprinted using the mouse wheel, mouse speed, a CPU benchmark, and βgetClientRectsβ. POCs (proo
VBoxManage can't directly convert vdi to qcow2, so there is two options : With VBoxManage convert vdi to raw and with qemu-img convert raw to qcow2 With qemu-img convert vdi to qcow2 Notes : vdi are
Create a new user. In the following example, we will name it bob. root# useradd -m bob root# id bob uid=1000(bob) gid=1000(bob) groupes=1000(bob) Set the password for the new user. root# passwd bo
VM automatic action at Hyper-V start up# Set-VM [VM_NAME] -AutomaticStartAction [Option] With : [VM_NAME] : The VM name [Option] : Nothing : When the host is powered on, the VM will do nothing Start
FreeBSD update to version 10.3. Main improvments: 15 security flaws patched UEFI support Gnome 3.16.2 Full Release Notes on official FreeBSD website.
OpenBSD update to version 5.9. Main improvments: Pledge - a new mitigation mechanism process in restricted mode security improved 70% of user components converted WiFi 802.11n multithread network
A usefull command if are want to read keyboard input : showkey. Very useful to know keycodes when programming. What is showkey ?# showkey - examine the codes sent by the keyboard How does it work ?# s
The man known as Optix, the owner of Newsoo, was taken into custody by the DIPJ the 2016/03/22. Newsoo was a French Usenet provider, the service was delivering 2 GB of pirated data per second. Sacem p
Before beginning# These are the steps to do on the SSH server. Be sure to do all the steps before exiting SSH connection if you are connected via SSH. This config was tested for default CentOS 7 iso.
Introduction# You have all seen the hype around XBOW: βthe AI that climbed 1st on HackerOne leaderboardβ. As often, when something new appears or a ne
Introduction# Vous avez tous vu le battage médiatique autour de XBOW : «l'IA qui s'est hissée à la première place du classement de HackerOne». Comme s
Information Room# Name: Billing Profile: tryhackme.com Difficulty: Easy Description: Some mistakes can be costly. Write-up Overview# Install tools use
Information Room# Name: Bypass Disable Functions Profile: tryhackme.com Difficulty: Info Description: Practice bypassing disabled dangerous features t
Introduction: the error of not choosing# Disqus is one of the major third-party commenting and discussion system. However, I never really chose to use
βββββββββββββββ βββββββ βββββββ βββββββ βββ βββ βββββββ βββ βββ βββββββββββββββββββββββββββββββββββββββββ βββ βββββββββββββββ βββ ββββββ βββββββββββββ
Official domain names of Rawsec services. The blog: URL Description https://blog.raw.pm/ Main domain hxxps://rawsec[.]ml/ Backup domain, taken over hx