I am currently working on a bug bounty program and in one subdomain of my target there is a Blind SQL flaw in a cookie. The back-end is MSSQL/ASP.net however, since cookies are separated by semicolons ";" I can’t find a way to tr…
What can VPN providers see without hacking when I access an email site (ex. mail.yahoo.com) with HTTPS via their service? Can they see only not critical data like source and destination IP’s, timestamp etc. or can they see more detailed in…
Type: Threat AnalysisAzure Active Directory Sign-Ins Log TamperingLearn how Secureworks CTU researchers revealed a flaw in the Azure Active Directory Connect Health agent protocol that could be exploited by a threat actor who has local administrator ac…
Vulnerability Assessments and Penetration Testing (Pentesting) A vulnerability assessment is the process of identifying and quantifying known security vulnerabilities in an environment.
Our SIEM has a Sigma rule that alerts when svchost is launched without any arguments. The logs are from a domain controller which unfortunately I don’t have access to to verify. I will be reaching out to our system admin, but can anyone …
Please explain how this recent Cockpit CMS exploit works, specifically using the $func operator of the MongoLite library, in more detail. How does it exactly make the PHP code behave?
As I understand it, the PHP code uses MongoLite to conn…
I am trying to automate my recon process. For port scanning, I resolve subdomains to IPs then loop over those IPs with masscan. But is it worth it to port scan an asset that is hidden behind a web firewall? In other words, by doing this I’…
The FLARE team is once again
hosting its annual Flare-On challenge, now in its eighth year. Take
this opportunity to enjoy some extreme social distancing by solving
fun puzzles to test your mettle and learn new tricks on your path to
reverse…
The FLARE team is once again
hosting its annual Flare-On challenge, now in its eighth year. Take
this opportunity to enjoy some extreme social distancing by solving
fun puzzles to test your mettle and learn new tricks on your path to
reverse…
Applications running on android devices below 10 are vulnerable to task hijacking. Even though the issue is fixed from android 11 and above, we cannot tell our customers to upgrade the android version in order to fix the issue.
Some recomm…
