On a typical red team assessment, a redirector is a crucial part of the infrastructure in use. A redirector is basically a box that sits out on the internet (usually in some type of cloud service provider’s network) and forwards traffic for the red team so…

What are the uses of cookie flags such as SameSite, Secure and HttpOnly. Man in the middle attack. Cookie stealing. Cross site request forgery.

A write up of several security vulnerabilities I discovered in Siaberry, including command-injection, clickjacking, and more.

CSS XSS came back for a bit which lead to an unusual uXSS

See how to go beyond standard U2F functionality of your YubiKey and authenticate via SSH from a Mac with a PGP key on a USB stick.

Firewall Weakness in Microsoft Azure’s Backplane Health Check I decided to do this write up because Microsoft doesn’t really give the full story on their website when describing why ports 65503-65534 need to be open to everything on the internet. Azure customers…

Author: Ambulong 1 phpMyAmin 4.7.x XSRF/CSRF Vulnerability (PMASA-2017-9)phpMyAdmin is a well-known MySQL/MariaDB online management tool, phpMyAdmin team released the version 4.7.7 that addresses the

What a Brute Force Attack is? How to defend yourself or even prevent it? Get all the information about Brute Force Attack, and be armed and ready for all the fraud schemes which may be implemented on your resource.

A Public Disclosure of Issues Around Third

As an attacker, initial access can prove to be quite the challenge against a hardened target. When selecting a payload for initial access…

A showcase of real-world phishing emails caught by our anti-phishing technology

XBruteForcer - X Brute Forcer Tool 🔓 WordPress , Joomla , DruPal , OpenCart , Magento

By employing machine learning algorithms, we were able to discover an enormous certificate signing abuse by BrowseFox, a potentially unwanted application (PUA) detected by Trend Micro as PUA_BROWSEFOX.SMC.

In February 2018 I wrote about CAA records. CA’s must check and respect these records when a customer orders a certificate. This is a good thing and it can be a good security measure to use t…

Homepage of Jochen Hoenicke

For a start, it is worth to remember what is vulnerability, and why one shouldn’t trust data received from outside.

In this blog post René Freingruber (@ReneFreingruber) from the SEC Consult Vulnerability Lab shares different filesystem tricks which were collected over the last years from various blog posts or found by himself. These tricks don't lead to a directly exploitable…

TL;DR – How to open a Tapplock over BLE in under two seconds: Totally Pwning the Tapplock Smart Lock A couple of weekends ago, a YouTuber called JerryRigEverything posted a teardown of a "smart" padlock, called the Tapplock. He discovered that, using a sticky…

We are looking for cybersecurity professionals to test the navigation of an Endpoint Protection Platform's Website, with a method called card sorting.
The test could be easily completed in appr. 15-25 minutes remotely, online, whenever, and wherever with…