🚨 New Blog Post: Exploiting CVE-2024-0582 via the Dirty Page Table Method! Discover how dangling pages can corrupt Page Table Entries (PTEs) and redirect user-space memory to kernel-space. Read the full analysis: kuzey.rs/posts/Dirty_Pa… #ExploitDevelopment #KernelSecurity

bezgin'e oturduk içtik çok güzel bir gün geçirdik. zamana not bıraktık bugüne ihanet etmemek için karar kıldık. yaşamın rüzgarına karşı sırtımızı verdik ve ortak yere noktaya sürüklenmek için sözleştik.

🚀 New feature alert!🚀 Introducing Storage Data JavaScript This powerful JS code auto-sets stolen cookies, Session Storage, and Local Storage values exploited via 🔥XSS🔥vulnerabilities. Enhance your security testing now! 🔥 #XSS 🔥 #Cybersecurity 🔥

🚀 New Feature Alert on xss.report 🔥 We're leveling up your XSS game with AI-Powered XSS Analysis! 🧠💡 No more guessing — instantly see where your payload executes in the DOM! 💻 DOM tracing made simple 🎯 Precision payload debugging ⏱️ Save hours on manual testing

I bought Samsung 5G Mobile WiFi (SCR01) for personal use and I noticed some interesting bugs exist.. but Samsung denied fixing as it's an obsolete device... I might just move to Mudi V2(GL-E750V2) at this point... Here's the exploit btw gist.github.com/stypr/d8534fd0…

We're back! This time, we're analyzing CVE-2025-34028 - a pre-auth Remote Code Execution vulnerability we discovered in Commvault - yet another enterprise-grade Backup and Replication solution. labs.watchtowr.com/fire-in-the-ho…

This is big ..😜 oligo.security/blog/airborne

🚨Nebulous Mantis (also known as Cuba), a Russian-speaking cyber espionage group behind the 2023 NATO Summit campaign, has escalated operations in 2025. Their recent campaigns target sectors like tech, healthcare, and engineering, while still focusing on geopolitical interests.

Türkiye'nin en küçük siber güvenlik etkinliği TTMO Meetup #6. Detaylar yakında...

#hiring

PARTY TIME #offensivecon

I’ve developed a Binary Ninja plugin to load encrypted riscy-business bytecode. It locates the encryption key, decrypts the bytecode, auto-renames initial functions, resolves import table entries, and annotates VM-specific syscalls. An example binary is included in the repository

Do you know there's an official BLE service for cycling sensors? I didn't, so here's my DIY ESP32 with a reed sensor and a Samsung Health connection! New blog post: "Emulating a Bike Sensor" 👇

If anyone is participating in Owasp Barcelona, I would like to meet 🙌

Found an XSS vulnerability but received a $1,337 bounty? 😂 Keep grinding, hunters! Big 💸 awaits! Share your funniest bounty tale in reply! 🤓 xss.report #BugBounty #XSS I was previously awarded $300 for an XSS I found in WordPress Core. Hahaha yes, admin finds #XSS

Our new blog post is live: blog.dfsec.com/ios/2025/05/30…

Excited to share that I reported CVE-2025-48745, Roundcube ≤ 1.6.10 Post-Auth RCE via PHP Object Deserialization. This bug has existed undetected for 10 years and affects over 53 Million hosts. Details and PoC will be published soon. We're giving time to all affected parties to

Leaking the phone number of any Google user brutecat.com/articles/leaki…

i am selling domain: offensive.blog

up up up uzmanlık alanı gerektirmiyor. sadece çık ve konuş. bu iş için uzmana değil araştırmacı ruha ihtiyaç var. evet o sensin başvur. güzel zaman olacak