Everything you care about in one place
Follow feeds: blogs, news, RSS and more. An effortless way to read and digest content of your choice.
Get Feederblog.quarkslab.com
Quarkslab's blog
Get the latest updates from Quarkslab's blog directly as they happen.
Follow now 98 followers
Latest posts
Last updated 18 days ago
ControlPlane Local Privilege Escalation Vulnerability on macOS
18 days ago
Introduction ControlPlane, originally a fork of MarcoPolo, is a powerful open-source context-aware...
When too much access is not enough: a story about Confluence and tokens
about 1 month ago
Introduction During engagements, we frequently come across Confluence instances. Confluence is a...
Getting started with Wirego
about 2 months ago
Context When reversing a protocol, we usually start with a capture of...
ProxyBlobing into your network
3 months ago
Introduction At Quarkslab, we focus on the impact an attacker can have...
Auditing Moodle's core hunting for logical bugs
3 months ago
Foreword Before anything else, I would like to remind you how important...
Security audit of PHP-SRC
4 months ago
Introduction The Open Source Technology Improvement Fund, Inc, thanks to funding provided...
A small bug in the signature verification of AOSP OTA packages
4 months ago
Introduction In this post, we will explore how OTA package authentication works...
CCleaner Local Privilege Escalation Vulnerability on macOS
4 months ago
Introduction CCleaner is a widely recognized system optimization tool designed to assist...
Finding bugs in implementations of HQC, the fifth post-quantum standard
4 months ago
Introduction In March 2025, NIST decided to standardize HQC as the last...
Beyond the Hook: A Technical Deep Dive into Modern Phishing Methodologies
5 months ago
Introduction In 2025, phishing is still the most prevalent kind of cyber...
Audit of Allbridge Estrela — Round 2
5 months ago
Introduction Last year, Allbridge entrusted us to audit two of their products...
Pwn everything Bounce everywhere all at once (part 2)
5 months ago
Context In our first blog post of this series we showed how,...