Welcome to Nettitude Labs

CVE-2018-8955: Bitdefender GravityZone Arbitrary Code Execution

/

Tuesday 16 October 2018

We recently identified a vulnerability in the digitally signed…

DerbyCon 2018 CTF Write Up

/

Thursday 11 October 2018

We have just returned from the always amazing DerbyCon 2018 conference.…

CVE-2018-5240: Symantec Management Agent (Altiris) Privilege Escalation

/

Wednesday 12 September 2018

During a recent red team exercise, we discovered a vulnerability…

CVE-2018-12897: Solarwinds Dameware Mini Remote Control Local SEH Buffer Overflow

/

Wednesday 5 September 2018

Dameware Mini Remote Control (MRC) is a remote administration…

Introducing Scrounger - iOS and Android mobile application penetration testing framework

/

Thursday 23 August 2018

Scrounger is a modular tool designed to perform the routine tasks…

Extending C2 Lateral Movement – Invoke-Pbind

/

Thursday 16 August 2018

Invoke-Pbind is a mini post exploitation framework written in…

Using PoolTags to Fingerprint Hosts

/

Wednesday 8 August 2018

Commonly, malware will fingerprint the host it executes on, in…

Advisories, Blog

CVE-2018-13442: SolarWinds NPM SQL Injection

/

Thursday 2 August 2018

A SQL injection vulnerability has been discovered in SolarWinds’…

$C:\Users\coakley\Desktop\labs.nettitude.com\Blogs\2018\Avecto\Pictures\Avecto_Block.png$

CVE-2017-16245 & CVE-2017-16246: Avecto Defendpoint Multiple Vulnerabilities

/

Monday 30 July 2018

Avecto Defendpoint is an endpoint protection product which, according…