Hacktive Security Blog

Exploitation

Exploiting a Quarantine UAF Mitigation on a Custom Allocator Challenge

November 12, 2024November 12, 2024

Introduction In the previous blog post (A Reverse Engineering Walkthrough Journey) we have covered a walkthrough guide to solve the Reverse Engineering challenge written for...

Reverse Engineering

A Reverse Engineering Walkthrough Journey

Alessandro Groppo

November 4, 2024November 5, 2024

Introduction This blog post is about a manually Reverse Engineered challenge we have written for this year NoHat24 security conference. The conference was a blast...

Active Directory

piADina – Italian Recipe for Internal Penetration Testing

Riccardo Degli Esposti

June 20, 2024

What you will read now is not a write-up, a to-do list of steps to follow or a standard to convey to those who are...

Application Security

CVE-2024-32651 – Server Side Template Injection (Changedetection.io)

Edoardo Ottavianelli

May 8, 2024September 25, 2024

TL;DR A Server Side Template Injection in changedetection.io caused by usage of unsafe functions of Jinja2 allows Remote Command Execution on the server host. Update...

Meet The Team

🇮🇹 Conosciamo Christopher Bianchi – Penetration Tester / Red Teamer

calfcrusher

April 24, 2024April 24, 2024

Generalmente questo genere di articoli cominciano dicendo: "da piccolo ero solito smontare e rimontare cose.." mentre la verità è che a me non interessavano. In...

Meet The Team

Conosciamo Alessio Romano – Penetration Tester

o___o

February 28, 2024

Il mio primo approccio al mondo dell'informatica, differentemente da quanto ci si aspetterebbe, è stato simile a quello di molti altri che, come me, sono...

Machine Learning Red Teaming

Offensive Machine Learning – practical introduction

Riccardo Degli Esposti

January 16, 2024

Disclaimer This article is intended to be an introduction to machine learning applied to cybersecurity that is understandable even to those who approach it without...

Active Directory

Inside the Mind of a Cyber Attacker: from Malware creation to Data Exfiltration (Part 2)

calfcrusher

November 15, 2023January 13, 2024

DISCLAIMER - This article is provided for educational and informational purposes only. The techniques, tools, and examples discussed are intended to promote a better understanding...

GRC

Security VS Corporate Management

Angelo Chiarot

September 13, 2023January 13, 2024

The devil and holy water THE SITUATION Having had the opportunity to observe a few hundred companies over the past 30 years, to date there...

Active Directory

Unveiling the Hidden Threat: Dissecting a Malware on PyPI repository

calfcrusher

August 2, 2023January 29, 2024

In the vast realm of software development, the Python Package Index has long been a trusted repository for Python packages. However, even the most reliable...

Hacktive Security Blog

Exploiting a Quarantine UAF Mitigation on a Custom Allocator Challenge

A Reverse Engineering Walkthrough Journey

piADina – Italian Recipe for Internal Penetration Testing

CVE-2024-32651 – Server Side Template Injection (Changedetection.io)

🇮🇹 Conosciamo Christopher Bianchi – Penetration Tester / Red Teamer

Conosciamo Alessio Romano – Penetration Tester

Offensive Machine Learning – practical introduction

Inside the Mind of a Cyber Attacker: from Malware creation to Data Exfiltration (Part 2)

Security VS Corporate Management

Unveiling the Hidden Threat: Dissecting a Malware on PyPI repository

Top Category

Application Security

Mobile

Meet The Team

Recent Post

Top Category