OUR BLOG
Teaching MemProcFS to Read Linux Memory
For years, [MemProcFS](https://github.com/ufrisk/memprocfs) has had one of the nicest workflows in memory forensics: point it at a memory image and it mounts the thing as a filesystem you can `cd` into, `cat`, and `grep` like a live machine. No query language to...
8 Hours, 5 Teams, 5 Tools: Inside the First TwelveSec Hackathon
In the fast-paced world of cybersecurity, it is remarkably easy to get caught up in the daily operational grind. Between penetration tests, security audits and responding to emerging threats, the day-to-day work of a security professional is high-stakes and...
Hardware Hacking: Why You Must Test Your Devices
Hardware hacking refers to the process of manipulating, modifying, or exploiting the underlying hardware of devices to gain unauthorised access or cause disruption. Whether it’s a router, smartphone, or even a medical device, attackers often find ways to exploit...
Stop Calling Them Password Managers: The Truth About Chromium’s In-Memory Flaw
We need to talk about the built-in "password managers" in Chromium-based browsers like Google Chrome, Brave, and Microsoft Edge. They are incredibly convenient, syncing effortlessly across your devices and autofilling your credentials with a single click. But as...
RCE Via Arbitrary File Upload at Open eClass
Introduction The Open eClass platform (http://www.openeclass.org) is an integrated Learning Management System (LMS). It follows the philosophy of open source software and supports a multitude of e-learning scenarios without restrictions and constraints. The service...
BoFs Are Not Dead
Abstract Buffer overflow vulnerabilities remain highly relevant in embedded systems, where the absence of operating system abstractions and modern memory protection mechanisms creates conditions fundamentally different from traditional software exploitation. Unlike...