New website address and RSS Feed We’re excited to announce that all of NCC Group’s latest research findings... 2024-8-13 23:39:47 | 阅读: 11 | 收藏 | NCC Group Research - research.nccgroup.com mallocng 24834 musl iron smm

Stepping Stones – A Red Team Activity Hub NCC Group is pleased to open source a new tool built to help Red Teams... 2024-6-12 21:31:48 | 阅读: 12 | 收藏 | NCC Group Research - research.nccgroup.com stones stepping bloodhound mallocng cobalt

Pumping Iron on the Musl Heap – Real World CVE-2022-24834 Exploitation on an Alpine mallocng Heap PumpingIron on the Musl Heap – Real World CVE-2022-24834 Exploitation on... 2024-6-11 22:36:33 | 阅读: 12 | 收藏 | NCC Group Research - research.nccgroup.com lua tvalue overflow mallocng cycling

Enumerating System Management Interrupts System Management Interrupts (SMI) provide a mechanism for entering System... 2024-6-11 00:0:0 | 阅读: 4 | 收藏 | NCC Group Research - research.nccgroup.com smi counts smm chipsec smis

Real World Cryptography Conference 2024 This year’s Real World Cryptography Conference recently took place in Toron... 2024-6-8 00:0:0 | 阅读: 7 | 收藏 | NCC Group Research - research.nccgroup.com security pqc gcm poly1305

Public Report – Keyfork Implementation Review In April 2024, Distrust engaged NCC Group’s Cryptography Services team to p... 2024-6-6 23:28:28 | 阅读: 3 | 收藏 | NCC Group Research - research.nccgroup.com keyfork scoutsuite distrust security

Cross-Execute Your Linux Binaries, Don’t Cross-Compile Them Lolbins? Where we’re going, we don’t need lolbins.At NCC Group, as a cons... 2024-6-5 22:32:21 | 阅读: 10 | 收藏 | NCC Group Research - research.nccgroup.com skipped strace pulled dexdump lib64

Why AI Will Not Fully Replace Humans for Web Penetration Testing Written by: Steven van der BaanIn the ever-evolving landscape of cybers... 2024-5-31 22:14:44 | 阅读: 5 | 收藏 | NCC Group Research - research.nccgroup.com testers security scoutsuite cryptopals

Integrating DigitalOcean into ScoutSuite We are excited to announce the addition of a new provider in our open-sourc... 2024-5-27 17:0:0 | 阅读: 11 | 收藏 | NCC Group Research - research.nccgroup.com cryptopals scoutsuite nanomips eight

Cranim: A Toolkit for Cryptographic Visualization Let’s kick this off with some examples. Here’s a seamless loop illustrating... 2024-5-25 03:30:0 | 阅读: 7 | 收藏 | NCC Group Research - research.nccgroup.com cranim manim tour guided cryptopals

Announcing the Cryptopals Guided Tour Video 17: Padding Oracles! Hello and welcome back to the Cryptopals Guided Tour (previously, previousl... 2024-5-25 02:59:0 | 阅读: 8 | 收藏 | NCC Group Research - research.nccgroup.com cryptopals wiki guided tour animations

Ghidra nanoMIPS ISA module IntroductionIn late 2023 and early 2024, the NCC Group Hardware and Embedd... 2024-5-8 01:11:57 | 阅读: 7 | 收藏 | NCC Group Research - research.nccgroup.com md1 firmware mt6879 nanomips nr16

Sifting through the spines: identifying (potential) Cactus ransomware victims Authored by Willem Zeeman and Yun Zheng HuThis blog is part of a series... 2024-4-25 12:1:0 | 阅读: 12 | 收藏 | NCC Group Research - research.nccgroup.com qlik cactus ransomware ttf doubleqlik

Public Report – Confidential Mode for Hyperdisk – DEK Protection Analysis During the spring of 2024, Google engaged NCC Group to conduct a design rev... 2024-4-13 03:0:0 | 阅读: 12 | 收藏 | NCC Group Research - research.nccgroup.com dek chd ollama aggregation

Non-Deterministic Nature of Prompt Injection As we explained in a previous blogpost, exploiting a prompt injection attac... 2024-4-12 23:19:41 | 阅读: 9 | 收藏 | NCC Group Research - research.nccgroup.com injection llm payload vultur

Technical Advisory – Ollama DNS Rebinding Attack (CVE-2024-28224) Vendor: OllamaVendor URL: https://ollama.com/Versions affected: Versions... 2024-4-9 01:0:0 | 阅读: 18 | 收藏 | NCC Group Research - research.nccgroup.com ollama rebinding exfiltrate attackers attacker

Public Report – Google Privacy Sandbox Aggregation Service and Coordinator During the winter of 2022, Google engaged NCC Group to conduct an in-depth... 2024-3-28 19:59:0 | 阅读: 8 | 收藏 | NCC Group Research - research.nccgroup.com aggregation ltair security initiative vultur

Android Malware Vultur Expands Its Wingspan Authored by Joshua KampThe authors behind Android banking malware V... 2024-3-28 18:0:0 | 阅读: 18 | 收藏 | NCC Group Research - research.nccgroup.com vultur payload c2 vnc

LTair:  The LTE Air Interface Tool In this blog post, we introduce LTair, a tool that allows NCC Group to perf... 2024-3-14 18:0:0 | 阅读: 42 | 收藏 | NCC Group Research - research.nccgroup.com lte network ltair tau victim

The Development of a Telco Attack Testing Tool This blog details the requirement for testing Telecom networks and one of t... 2024-3-13 23:33:10 | 阅读: 23 | 收藏 | NCC Group Research - research.nccgroup.com security diameter specs nitro telecom