CVE-2022-20951: Cisco BroadWorks CommPilot Application exposes a servlet that allows the application to be used as an HTTP proxy server. The lack of validation of the the target URL and the lack of authentication protection allows an unauthenticated attacker…

DirtyCred Remastered: how to turn an UAF into Privilege Escalation

Disclaimer: as many other security researchers […]

As part of my internship at STAR Labs, I conducted n-day analysis of CVE-2020-6418. This vulnerability lies in the V8 engine of Google Chrome, namely its optimizing compiler Turbofan. Specifically, the vulnerable version is in Google Chrome’s V8 prior to…

Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.

Taking a look at the timeline leading up to exploitation of CVE-2022-35914 and the current state of attacks in the wild.

How enabling a single vulnerable feature removed the entire network and identity perimeter around internet-isolated Azure Cognitive Search instances.

Last week's news and how-tos in the art and science of Detection Engineering

We are working diligently to understand the scope of the incident and identify what specific information has been accessed.

Laika helps companies manage compliance, obtain security certifications, and build trust with enterprise customers.

An open source append only database of known subdomains to discover, store and serve subdomains as fast as possible.

Isn’t there a better moment than the Holiday season to release a major update of our RDP Attack and Eavesdropping tool PyRDP? That’s right, pour yourself a little glass of eggnog, sit in a comfortable chair, put on some Christmas music and read about the…

Overview of current GLIBC heap exploitation techniques up to GLIBC 2.34, including their ideas and introduced mitigations along the way

In this blog post, we present new techniques for recovering the NTLM hash from an encrypted credential protected by Windows Defender…

Contribute to scarvell/advisories development by creating an account on GitHub.

An abbreviated guide to scaling automated security testing using tooling from the Prelude ecosystem.

Load shared object (PHP extension) from memory

Introduction In this article, I will present a new technique to bypass Microsoft’s Anti-Malware Scan Interface (AMSI) using API Call Hooking of CLR methods. When executed on a Windows system,…

🔐 A CLI tool to extract server certificates. Contribute to Hakky54/certificate-ripper development by creating an account on GitHub.