Unveiling the Hidden Threat: Dissecting a Malware on PyPI repository
In the vast realm of software development, the Python Package Index has long been a trusted repository for Python packages. However, even the most reliable...
Hacking the Dutch government
A few months ago I found out that the dutch government is hosting a bug-bounty program that covers a lot of assets from their infrastructures....
How an Akamai misconfiguration earned us USD 46.000
A few months ago me and my friend Jacopo Tediosi made an interesting discovery about an Akamai misconfiguration that allowed us to earn more than...
Workshop: Linux Kernel Exploitation 101 – Part 2
https://youtu.be/2FMTdFbjIsk Slide: https://hacktivesecurity-my.sharepoint.com/:b:/p/alessandro/EX9sSrCCRIlLqvkHoRl7_jQBB6xKgV_qLL9UA5fIwf2Cbw?e=cCQpixMateriale utilizzato nel video (per poter replicare i lab): https://hacktivesecurity-my.sharepoint.com/:u:/p/alessandro/EX08cV3wTzZJsEeEQwZvw80BbybF2CpUmJdsXXGlY0hnwA?e=JaGru3Il materiale è stato testato con Ubuntu 20.04 con architettura x86_64. Non dovrebbero esserci...
Workshop: Linux Kernel Exploitation 101 – Part 1
https://youtu.be/gkXsH0eJQvY Slide: https://hacktivesecurity-my.sharepoint.com/:b:/p/alessandro/EX9sSrCCRIlLqvkHoRl7_jQBB6xKgV_qLL9UA5fIwf2Cbw?e=cCQpixMateriale utilizzato nel video (per poter replicare i lab): https://hacktivesecurity-my.sharepoint.com/:u:/p/alessandro/EX08cV3wTzZJsEeEQwZvw80BbybF2CpUmJdsXXGlY0hnwA?e=JaGru3Il materiale è stato testato con Ubuntu 20.04 con architettura x86_64. Non dovrebbero esserci...
Dynamic caching: What could go wrong?
Tl;DrThe Engintron plugin for CPanel presents a default configuration which could expose applications to account takeover and / or sensitive data exposure due to cache...