Login
Extending Burp Suite for fun and profit – The Montoya way – Part 4
30 August 2023 at 10:12
Setting up the environment + Hello […]
The post Extending Burp Suite for fun and profit – The Montoya way – Part 4 appeared first on hn security.
Normal view
Before yesterdayhn security
Extending Burp Suite for fun and profit – The Montoya way – Part 3
19 July 2023 at 09:47
Setting up the environment + Hello […]
The post Extending Burp Suite for fun and profit – The Montoya way – Part 3 appeared first on hn security.
Extending Burp Suite for fun and profit – The Montoya way – Part 2
5 July 2023 at 09:39
Setting up the environment + Hello […]
The post Extending Burp Suite for fun and profit – The Montoya way – Part 2 appeared first on hn security.
Extending Burp Suite for fun and profit – The Montoya way – Part 1
5 July 2023 at 09:39
-> Setting up the environment + […]
The post Extending Burp Suite for fun and profit – The Montoya way – Part 1 appeared first on hn security.
Pentesting Xamarin Android apps: DLLs and root check bypass
13 June 2023 at 07:38
In this article, I’ll show how […]
The post Pentesting Xamarin Android apps: DLLs and root check bypass appeared first on hn security.
Cracked password analytics with Kraken
11 May 2023 at 08:24
Hi! We are releasing Kraken, HN […]
The post Cracked password analytics with Kraken appeared first on hn security.
Celebrating two years of HN Security
6 April 2023 at 07:24
Hello there! Please allow me a […]
The post Celebrating two years of HN Security appeared first on hn security.
Abusing Maven’s pom.xml
27 February 2023 at 10:14
Apache Maven is a well-known tool […]
The post Abusing Maven’s pom.xml appeared first on hn security.
Nothing new under the Sun – Discovering and exploiting a CDE bug chain
18 January 2023 at 07:53
“What has been will be again, […]
The post Nothing new under the Sun – Discovering and exploiting a CDE bug chain appeared first on hn security.
A journey into IoT – Unknown Chinese alarm – Part 4 – Internal communications
21 December 2022 at 15:00
Disclaimer: as many other security researchers […]
The post A journey into IoT – Unknown Chinese alarm – Part 4 – Internal communications appeared first on hn security.
Burp Suite and Protobuf
22 November 2022 at 13:27
Hi, Last year (I know, I’m […]
The post Burp Suite and Protobuf appeared first on hn security.
Semgrep rules for Kotlin security assessment
12 October 2022 at 08:15
Hi, I recently had the chance […]
The post Semgrep rules for Kotlin security assessment appeared first on hn security.
Groovy Template Engine Exploitation – Notes from a real case scenario
7 September 2022 at 10:27
Java web applications are far from […]
The post Groovy Template Engine Exploitation – Notes from a real case scenario appeared first on hn security.
Useless path traversals in Zyxel admin interface (CVE-2022-2030)
22 August 2022 at 11:54
During our analysis of Zyxel’s device […]
The post Useless path traversals in Zyxel admin interface (CVE-2022-2030) appeared first on hn security.
A journey into IoT – Unknown Chinese alarm – Part 3 – Radio communications
5 August 2022 at 07:33
Disclaimer: as many other security researchers […]
The post A journey into IoT – Unknown Chinese alarm – Part 3 – Radio communications appeared first on hn security.
Zyxel authentication bypass patch analysis (CVE-2022-0342)
26 July 2022 at 09:34
A few months ago, new firmware […]
The post Zyxel authentication bypass patch analysis (CVE-2022-0342) appeared first on hn security.
Automating binary vulnerability discovery with Ghidra and Semgrep
7 July 2022 at 05:51
“Some details are more important than […]
The post Automating binary vulnerability discovery with Ghidra and Semgrep appeared first on hn security.
Semgrep rules for PHP security assessment
22 June 2022 at 08:29
Hi! According to the official documentation, Semgrep […]
The post Semgrep rules for PHP security assessment appeared first on hn security.
Multiple vulnerabilities in Zyxel zysh
7 June 2022 at 06:33
“We live on a placid island […]
The post Multiple vulnerabilities in Zyxel zysh appeared first on hn security.
A journey into IoT – Unknown Chinese alarm – Part 2 – Firmware dump and analysis
20 May 2022 at 08:24
Disclaimer: as many other security researchers […]
The post A journey into IoT – Unknown Chinese alarm – Part 2 – Firmware dump and analysis appeared first on hn security.
Zyxel firmware extraction and password analysis
3 May 2022 at 08:19
Backstory During a red teaming exercise […]
The post Zyxel firmware extraction and password analysis appeared first on hn security.
Semgrep ruleset for C/C++ vulnerability research
11 April 2022 at 07:21
“Humans are more suited to recognize […]
The post Semgrep ruleset for C/C++ vulnerability research appeared first on hn security.
A journey into IoT – Unknown Chinese alarm – Part 1 – Discover components and ports
22 March 2022 at 14:43
Disclaimer: as many other security researchers […]
The post A journey into IoT – Unknown Chinese alarm – Part 1 – Discover components and ports appeared first on hn security.
A journey into IoT – Chip identification, BUSSide, and I2C
3 March 2022 at 09:26
Hi! Years ago ( 🙁 ) […]
The post A journey into IoT – Chip identification, BUSSide, and I2C appeared first on hn security.
Hack In Paris video and Brida demo plugins released
17 February 2022 at 08:46
Hi, A few days ago, Hack […]
The post Hack In Paris video and Brida demo plugins released appeared first on hn security.
New (and old) shellcode samples
5 February 2022 at 10:54
“A vulnerability provides an assembly language […]
The post New (and old) shellcode samples appeared first on hn security.
letme.go – A minimalistic Meterpreter stager written in Go
20 December 2021 at 08:22
A few years back, I published […]
The post letme.go – A minimalistic Meterpreter stager written in Go appeared first on hn security.
Brida 0.5 released for Hack In Paris 2021!
24 November 2021 at 09:41
Hi! Last Friday my colleague Piergiovanni […]
The post Brida 0.5 released for Hack In Paris 2021! appeared first on hn security.
