kriwareAI @kriwareAI

Some tests this weekend, keeping consistency between shots is the real challenge, but some pretty cool stuff came out Image: FLUX.1 [pro] and gpt-image-1 Video: @Kling_ai Voice: @elevenlabsio Music: @udiomusic Script: @ChatGPTapp

The article details a path traversal vulnerability in Adobe Acrobat Reader for Android, which, when combined with dynamic code loading, allows remote code execution. hulkvision.github.io/blog/post1/ #android #cve

A practical walkthrough of reversing AES crypto functions using Ghidra to analyze key scheduling and encryption logic. goggleheadedhacker.com/blog/post/reve… #AES #crypto #re

Deep dive into how syscalls work in the Windows kernel, exploring structures, debugging, and reversing techniques. alice.climent-pommeret.red/posts/a-syscal… #WindowsKernel

Introductory guide on fuzzing using LibAFL, covering setup, techniques, and examples to discover software vulnerabilities. epi052.gitlab.io/notes-to-self/… #Fuzzing #LibAFL

How detect CVE-2025-29927, analyze your application's reliance on middleware-based authorization and test for unauthorized access by manipulating the x-middleware-subrequest header.​ patrowl.io/en/actualites/… #nextjs #detection

This article delves into the Android Activity lifecycle, examining state transitions and callbacks from creation to destruction. 8ksec.io/a-blueprint-of… #android

DeFiHackLabs is a repository that provides proof-of-concept demonstrations of past DeFi hacking incidents using Foundry. github.com/SunWeb3Sec/DeF… #web3 #labs #blockchain

Researchers have developed the 'Diamond Ticket' attack, allowing attackers with access to the KRBTGT key to decrypt and modify legitimate Ticket Granting Tickets (TGTs). trustedsec.com/blog/a-diamond… #ActiveDirectory #windows

A critical vulnerability (CVE-2025-29927) in Next.js middleware allows attackers to bypass authorization checks by manipulating the x-middleware-subrequest header. zhero-web-sec.github.io/research-and-t… #cve #nextjs

Poc NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File github.com/0x6rss/CVE-202… #poc #ntlm #cve

tmp.0ut Volume 4 is the latest edition of the zine, featuring articles on topics such as ELF internals, kernel modules, reverse engineering, and hacker culture. tmpout.sh/4/ #elf #reversing

This article explores the utility of frida-trace for hooking and tracing numerous methods in mobile applications, especially when dealing with obfuscated codebases. sensepost.com/blog/2025/usin… #frida #mobile

PowerShell-Hunter is a collection of PowerShell-based tools designed to assist defenders in detecting and investigating malicious activity within Windows environments. github.com/MHaggis/PowerS… #ThreatHunting #PowerShell

This article introduces an alternative Kerberoasting technique that doesn't require sending TGS-REQs to the Key Distribution Center (KDC). rastamouse.me/kerberoasting-… #kerberos

Researchers have identified a vulnerability in Apple's Find My network, termed "nRootTag," which allows attackers to transform any Bluetooth-enabled device into a covert tracking tool. nroottag.github.io #bluetooth #findmy

This article delves into common error messages encountered when abusing Active Directory Certificate Services (AD CS). sensepost.com/blog/2025/divi… #ActiveDirectory #ADCS

This article details the Doyensec team's analysis of a buffer overflow vulnerability in the Tenda AC15 router firmware (CVE-2024-2850) blog.doyensec.com/2025/02/11/exp… #IoTSecurity

This article introduces Nerve, a framework that simplifies the creation of autonomous agents by integrating large language models (LLMs) with various tools. evilsocket.net/2025/03/13/How… #Agents #ai

LibUSB based Bluetooth device driver. Take full control of your USB Bluetooth devices! github.com/antoniovazquez… #hci #bluetooth