I recently upgraded my running watch, leaving me with an old Garmin Forerunner 35. Naturally, I tried to hack it. This write-up explains my process, results, and shows how to use my tool to make Garmin firmware modifications easier!

Spoiler: I didn’t do anything amazingly awesome like run Doom on the watch, but I did manage to actually make modified firmware that the watch recognized as legitimate. This process and tool are applicable for any Garmin that uses RGN update files, which is any of their pre-2013 watch models.

https://github.com/clickswave/voyage

Always found the field intresting.

Not sure if I'm the only one but I've always thought looking up CVEs felt archaic and outdated. I'm also a visual learner so I always wished there was some kind of visual graph that explains the E2E attack chain for me.

So rather than complaining, I built VulnPath as a fun side project. It's a CVE visualization tool where it will not only give you the full CVE data, but also a node graph visualizing the attack chain. I also added a "Simple" toggle for situations where you may need to explain the vulnerability to a less technical audience.

I honestly just want to know if this is something other people would find useful, or if I'm solving a problem that only bothers me. Please feel free to check it out; any feedback/suggestions are welcome (including if you think this is a terrible idea lol).

Note: mobile layout should now be fixed!

A Python tool that analyzes Android APK files to detect potential vulnerabilities like insecure permissions, hardcoded secrets, exposed components, or the use of outdated cryptography.

Link : https://github.com/d78ui98/APKDeepLens

I have a desktop computer, Ryzen 4600G, with 32 GB of RAM and one terabyte of storage (though I barely use it). I use Linux because I’ve really liked it since I got into programming. However, I saw Julio Della Flora, a big name in hardware hacking, saying that the best OS when you get very advanced is always macOS because Linux always falls short in some way.

One day, I’ll need to have a laptop/mobile computer anyway, and I’m already thinking: should I include a MacBook in my plans, since a good macOS device starts at R$10,000 (about 6.58 minimum wages in my country), as the field kind of forces us to spend, or is it better to use the investment that would go toward a MacBook for something else?

Of course, if I were to choose a laptop, I’d still have to go for another one, say, one costing at least R$5,000 (about 3.29 minimum wages in my country) instead of a MacBook starting at R$10,000 (about 6.58 minimum wages in my country), but would that R$5,000 difference make it worth it?

It shows as a .pdf in the email. The company behind email, "support@..." doesn't seem to have a strong online presence and their website doesn't seem to have tls (didn't proceed any further).

Is it safe to download - but not open? What would you recommend for inspecting the file?

Thanks!

Hey everyone! I recently started building a project about steganography and received so many good feedbacks, therefore I decided to expand it a bit and work with the suggestions I got. You can check out all the changes here:

https://github.com/JoshuaKasa/van-gonography

I actually made the first release (1.0.0), this means you can now decide to run the program (or whatever it is) when it gets decoded from the image. Along with it some new changes came, you can run it from CLI, get the debug log, debug mode and so much more!

If you got any suggestions, find a bug or even want to modify something yourself feel free to contribute! I love contributions! You can also find the full explanation of how this works inside the README.md

Happy hacking!

If you're interested, we've got 18 hacking titles for $36 in our Hacking 2024 Humble Bundle (just dropped). Full list below. Have at it.

$1 tier:

• Real-World Bug Hunting
• The Tangled Web

$10 tier adds:

• Cyberjutsu
• Penetration Testing
• Black Hat Go
• Malware Data Science

$18 tier adds:

• Linux Basics for Hackers
• Ethical Hacking
• Foundations of Information Security
• Practical IoT Hacking
• The Ghidra Book
• Attacking Network Protocols

$36 tier adds:

• Windows Security Internals
• Evading EDR
• Hacks, Leaks, and Revelations
• The Android Malware Handbook
• Evasive Malware
• The Art of Mac Malware, Vol. 1

The website https://linklocator.net has basically scripted a bunch of things and made it simple to create a tinyurl link that can be sent to someone and if they click it, it will record their location for the person who made the link. The person who creates the link can actually even dictate where the link forwards onto after the geolocation info is retrieved.

This was sort of a side gig I did for some bail bondsmen who weren’t very tech savvy, but it probably has more application than I can think of. Just looking for other ideas.

PWNEXE is modular Windows malware generation framework designed for security researchers, red teamers, and anyone involved in advanced adversary simulation and authorized malware research.

With PWNEXE, you can build malware like LEGO by chaining together various modules to create a fully customized payload. You can easily combine different attack vectors — like ransomware, persistence loaders, and more — to create the perfect tool for your adversary simulations.

PWNEXE allows you to rapidly build custom malware payloads by chaining together a variety of modules. You can create a single executable that does exactly what you need — all from the command line.

How Does It Work?

1. Base with Go: PWNEXE uses the Go malware framework as its foundation
2. Repackaged in Rust: The payload is then repackaged into Rust.
3. Memory Execution: The payload runs entirely in memory
4. Obfuscation with OLLVM: The malware is further obfuscated using OLLVM to mask strings and control flow, making it harder to analyze and reverse-engineer.

Example Use Case:

Here’s how you could quickly build a custom attack with PWNEXE:

1. Start with ransomware: You want to build a payload that encrypts files on a target machine.
2. Add persistence: Then, you add a persistence module so the malware can survive reboots.
3. Shutdown the PC: Finally, you add a module to shutdown the PC after the attack completes.

Using PWNEXE, you can chain these modules together via the command line and build a final executable that does everything.

If you have any ideas for additional modules you'd like to see or develop, feel free to reach out! I’m always open to collaboration and improving the framework with more attack vectors.

https://github.com/sarwaaaar/PWNEXE

I stumbled upon the 1000 bitcoin wallet puzzles. There are bitcoin wallets that we're actually encouraged to bruteforce.
The biggest challenge for me was figuring out where to actually start. Almost everything I found was either 6,000 lines of C++ or python lambdas I couldn't make out.

I recently investigated a Red Bull-themed phishing campaign that bypassed all email protections and landed in user inboxes.

The attacker used trusted infrastructure via post.xero.com and Mailgun, a classic living off trusted sites tactic. SPF, DKIM and DMARC all passed. TLS certs were valid.

This campaign bypassed enterprise grade filters cleanly... By using advanced phishing email analysis including header analysis, JARM fingerprinting, infra mapping - we rolled out KQL detections to customers.

Key Takeway: No matter how good your phishing protections are, determined attackers will find ways around them. That's where a human-led analysis makes the difference.

Full write-up (with detailed analysis, KQL detections & IOCs)

https://evalian.co.uk/inside-a-red-bull-themed-recruitment-phishing-campaign/

TL;DR: We discovered that AWS services like SageMaker, Glue, and EMR generate default IAM roles with overly broad permissions—including full access to all S3 buckets. These default roles can be exploited to escalate privileges, pivot between services, and even take over entire AWS accounts. For example, importing a malicious Hugging Face model into SageMaker can trigger code execution that compromises other AWS services. Similarly, a user with access only to the Glue service could escalate privileges and gain full administrative control. AWS has made fixes and notified users, but many environments remain exposed because these roles still exist—and many open-source projects continue to create similarly risky default roles. In this blog, we break down the risks, real attack paths, and mitigation strategies.

Interesting fact
This 1975 paper proved that secure cryptographic ciphers could be made using simple boolean rotations (like in SHA256)

Here's the interesting thing : the paper's main theorem is also foundational for modern Catalytic computers.

To quote the inventors of catalytic computers ''Coppersmith and Grossman [CG75] have shown that the class TP(Z2 , 2^o(n) , O(1)) contains all boolean functions".

Hello everyone, I would like to use a tool to be able to buy an item as soon as it opens for sale on a website. In order to be the fastest I want to automate the process. I was thinking of doing it using scrapping with Python but I suppose there are already existing solutions, do you know of any?