Search titles only
By:
Home
Members
Moderators
Current visitors
Escrow
Deposit
Account Upgrades
ADS
Help
WMIX.TO
Komplexes Bot
Log in
Register
What's new
Search
Search titles only
By:
Menu
Log in
Register
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Depov's latest activity
Depov
posted the thread
Exploit against the kernel of Linux and Android showed a record success of the performance at the level of 99 percent
in
Worldwide News
.
In the Linux kernel, a vulnerability has been found that turns an ordinary user into a root and can hurt not only servers and...
Jul 6, 2026
Depov
posted the thread
EntryPoint Hijacking: process updating new generation equipment to bypass EDR
in
Web
.
Business logic: why an attacker covert introduction of the code Process Injection (T1055, Defense Evasion / Privilege Escalation) - one...
Jul 6, 2026
Depov
posted the thread
How to create a CTF a patch: the structure of the flag, storytelling and errors of authors
in
Programming
.
Educational goal is the basis of a good CTF task Before you open the code editor, answer one question: what specific skill will the...
Jul 6, 2026
Depov
posted the thread
CVE-2026-0257 Palo Alto GlobalProtect: bypass VPN authentication and escalation of the severity
in
Programming
.
The business logic of the attack: why bypass authentication GlobalProtect needs an attacker GlobalProtect is a VPN solution of Palo Alto...
Jul 6, 2026
Depov
posted the thread
Deanonymization of C2-infrastructure: from dangling CNAME to the operator's attribution via IP-bewing
in
Web
.
Attacker infrastructure as a threat intelligence object Without a communication channel between the implant and the control server, the...
Jul 6, 2026
Depov
posted the thread
EDR bypass macOS: XPC + NIB injection chain to disable CrowdStrike and Kandji
in
Web
.
At the red team operation against the macOS fleet of one fintech company in early 2026, we received an initial access through credential...
Jul 3, 2026
Depov
posted the thread
IEC 62443 and NIST SP 800-82: OT in practice — security program and maturity assessment
in
Programming
.
At a gap analysis of a chemical enterprise last year, we found the SIS (Safety Instrumented System) Triconex controller, connected to...
Jul 3, 2026
Depov
posted the thread
Protection from ransomware for small businesses: from attack vector to detection rule
in
Programming
.
The company is 80 hosts. Bakapi via Veeam every night, storage policy - 14 days. Monday, morning - accounting can not open the database...
Jul 2, 2026
Depov
posted the thread
CTF and machine learning: analysis of attacks on ML models in competitions
in
Web
.
On PHDays 9, the organizers launched an AI CTF of six tasks - out of 130 registered at least one flag, only 14 people handed over...
Jul 2, 2026
Depov
posted the thread
Rowhammer attack DRAM: evolution from the original to Blacksmith and bypass TRR
in
Programming
.
About 139 000 activations of the string-aggressor for a 64-millisecond refresh interval. It is necessary so much that the charge leakage...
Jul 1, 2026
Depov
posted the thread
Vulnerabilities of password managers: DOM-based Extension Clickjacking – analysis and detection for SOC
in
Programming
.
11 of the 11 password managers tested – 1Password, Bitwarden, LastPass, Dashlabe, iCloud Passwords and six more – were vulnerable to...
Jul 1, 2026
Depov
posted the thread
Threat Intelligence for SOC in practice: collection, processing and application of TI in a small team
in
Web
.
According to CrowdStrike Global Threat Report 2025, the average time of the email movement after initial access is 62 minutes. The...
Jul 1, 2026
Depov
posted the thread
Password storage architecture: how encryption is arranged in 1Password, Bitwarden, KeePass and browser managers
in
Web
.
In 2022, LastPass servers compromised, and the attackers took out the encrypted store of users - in total. Passwords inside were...
Jul 1, 2026
Depov
posted the thread
MinerSearch: Miner detection in Windows - from manual analysis to automatic removal
in
Programming
.
Business logic of hidden mining: why is it an intruder The hidden miner is one of the “quiet” threats. Unlike a ransomware that claims...
Jun 29, 2026
Depov
posted the thread
Responding to incidents in industrial networks: PLC, TTPs attackers and stop recovery
in
Programming
.
How the response to incidents of ICS SCADA differs from IT Responding to incidents in industrial networks is based on another model of...
Jun 29, 2026
Top
Bottom
