[ Android ]  From Android ART (binary-only) to DEX? Yes, we can ! : http://reyammer.blogspot.in/2016/03/from-android-art-binary-only-to-dex-yes.html

[ Android ]  Linux Kernel Exploitation on Android : https://github.com/Fuzion24/AndroidKernelExploitationPlayground cc: @ Fuzion24

[ Attack ]  New post: Exploit Kits in 2015: Scale and Distribution http://bit.ly/1TMCKTV @ TrendMicro

[ Attack ]  Targeted social engineering attack sees blueprints stolen and used http://www.itgovernance.co.uk/blog/targeted-social-engineering-attack-sees-blueprints-stolen-and-used/

[ Attack ]  To bypass code-signing checks, SuckFly malware gang steals lots of certificates http://arstechnica.com/security/2016/03/to-bypass-code-signing-checks-malware-gang-steals-lots-of-certificates/

[ Attack ]  DDoSing with Other People's Botnets : http://www.malwaretech.com/2016/03/ddosing-with-other-peoples-botnets.html cc: @ MalwareTechBlog

[ Debug ]  An Introduction to Debugging the Windows Kernel with WinDbg http://contextis.com/resources/blog/introduction-debugging-windows-kernel-windbg/

[ iOS ]  New Trojan #AceDeceiver entered App Store, infected non-jailbroken iOS via FairPlay MITM attack w/o enterprise cert: http://researchcenter.paloaltonetworks.com/2016/03/acedeceiver-first-ios-trojan-exploiting-apple-drm-design-flaws-to-infect-any-ios-device/

[ Malware ]  EDA2, derived from the educational ransomware, is easy to break http://securityaffairs.co/wordpress/45336/cyber-crime/eda2-easy-decryption.html

[ Malware ]  Security vs convenience: The story of ransomware spread by spam email – Naked Security http://ow.ly/ZwgBB

[ Malware ]  TeslaCrypt Ransomware Arrives via Neutrino Exploit Kit https://blogs.mcafee.com/mcafee-labs/teslacrypt-arrives-via-neutrino-exploit-kit/

[ Malware ]  A Look Into Malvertising Attacks Targeting The UK https://blog.malwarebytes.org/malvertising-2/2016/03/a-look-into-malvertising-attacks-targeting-the-uk/

[ Operating System ]  QNX Security Architecture - https://labs.mwrinfosecurity.com/assets/BlogFiles/mwri-qnx-security-whitepaper-2016-03-14.pdf #lowlevel

[ Others ]  Slides from my #smashingconf talk "HTTP/2 What, where, why, and when?!" are now online: https://speakerdeck.com/patrickhamann/http2-what-where-why-and-when-smashing-conference-march-2016

[ Others ]  Integer signedness error in the amd64_set_ldt() function in the FreeBSD kernel leading to a wild heap overflow: http://www.coresecurity.com/advisories/freebsd-kernel-amd64setldt-heap-overflow

[ Others ]  Talos Blog: TeslaCrypt 3.0.1 - Tales From The Crypt(o)! http://tinyurl.com/gpjmoq9

[ Others ]  partial writeup / exploit for very cool kernel challenge from @ 0opsCN https://github.com/acama/ctf/tree/master/0ctfquals2016/(%E3%81%A5%EF%BF%A3%203%EF%BF%A3)%E3%81%A5

[ Others ]  #Pwn2Own Remember: Full Schedule is at @ Trendmicro http://blog.trendmicro.com/pwn2own-2016-begun/

[ Pentest ]  Abusing PuTTY & Pageant through native functionality https://labs.mwrinfosecurity.com/blog/abusing-putty-and-pageant-through-native-functionality/

[ Pentest ]  Burp extension to quickly and easily develop Python complex exploits based on Burp proxy requests. https://github.com/peacand/burp-pyTemplate

[ Pentest ]  Inveigh #PowerShell LLMNR/NBNS spoofer updated with Potato style remote NBNS spoofing and a more detailed readme https://github.com/Kevin-Robertson/Inveigh

[ Pentest ]  My Cobalt Strike Scripts from NECCDC http://blog.cobaltstrike.com/2016/03/16/my-cobalt-strike-scripts-from-neccdc/

[ Pentest ]  Uploading files to compromised systems : http://ly0n.me/2015/10/21/uploading-files-to-compromised-systems/

[ Popular Software ]  @ HaifeiLi it wouldn't be the first time that virtualization software ends up making exploitation easier: http://www.coresecurity.com/content/virtual-pc-2007-hypervisor-memory-protection-bug

[ Popular Software ]  Server & Client side RCE through a buffer overflow in all git ver < 2.7.1 : http://seclists.org/oss-sec/2016/q1/645

[ Programming ]  Programming Language Design : https://www.cs.berkeley.edu/~bh/pdf/v3ch04.pdf (pdf)

[ Tools ]  Honerix: Online,distributed honeypot for capturing web-based attacks : https://www.honerix.com/

[ Tools ]  ROPMEMU: A Framework for the Analysis of Complex Code-Reuse Attacks : http://s3.eurecom.fr/docs/asiaccs16_graziano.pdf (pdf)