
PHP2Shell: One Upload, Full Server
Varonis Threat Labs' deep dive on the critical PHP2Shell vulnerabilities that allowed remote code execution, affecting millions of websites.

Varonis Threat Labs' deep dive on the critical PHP2Shell vulnerabilities that allowed remote code execution, affecting millions of websites.

ARP Poisoning is a type of cyberattack that abuses weaknesses in the widely used Address Resolution Protocol (ARP) to disrupt, redirect, or spy on network traffic. In this piece, we’ll…

A successful cyberattack is about more than just getting your foot into the door of an unsuspecting organization. To be of any real benefit, the attacker needs to maintain persistence…

Data classification is the process of analyzing data and organizing it into categories. Learn how to mitigate and manage governance policies with Varonis.

Learn what the Netcat utility program is and the different types of commands it can support to help IT organizations manage their networks in a better way.

An overview of stack memory, it’s architecture, and how it can be used to reverse-engineer malware using x64dbg.

This article acts as a tutorial on how to use Sysinternals Autoruns to detect potentially unwanted software that is installed and running automatically on your device.

PowerShell variable scopes can cause confusion in writing scripts and functions. This post will cover PowerShell scopes in relation to scripts and modules.

This article is an x64dbg tutorial in which reverse engineering malware methodology will be explained and demonstrated.

Follow this PowerShell Git tutorial on how to merge in Git, meaning how to take a local repository and merge it into a remote repository.

The Risk Management Framework (RMF) outlines how U.S. government IT systems must be secured, monitored, and governed to reduce cyber risk.

WMI is a subsystem of PowerShell that can be used to monitor remote systems and users. In this guide, we’ll explain what WMI is, and how to use it.

Explore 11 powerful malware analysis tools including traditional and AI-powered options that help security teams detect, dissect, and understand modern threats.
No posts found. Try another search or topic.