,

COM and the PowerThIEf

0 Comments
/
Recently, Component Object Model (COM) has come back in a big…
Read more →

CVE-2018-6851 to CVE-2018-6857: Sophos Privilege Escalation Vulnerabilities

0 Comments
/
We have recently disclosed a list of vulnerabilities to Sophos…
Read more →

CVE-2018-10956: Unauthenticated Privileged Directory Traversal in IPConfigure Orchid Core VMS

0 Comments
/
Affected Software: IPConfigure Orchid Core VMS (All versions…
Read more →

Introducing Prowl

0 Comments
/
Prowl was initially designed as an in house tool to aid engagements…
Read more →

Apache mod_python for red teams

0 Comments
/
Nettitude’s red team engagements are typically designed to…
Read more →

WinDbg: using pykd to dump private symbols

0 Comments
/
We’ve recently been conducting some reverse engineering and…
Read more →

CVE-2017-7351: REDCap 7.0.0 - 7.0.10 SQL Injection

0 Comments
/
A SQL injection vulnerability exists in REDCap versions 7.0.0…
Read more →
,

Making PoshC2 More Accessible With a $5 VPS

0 Comments
/
Users may find it difficult to host a PoshC2 server as it requires…
Read more →
,

Symantec Encryption Desktop Local Privilege Escalation - Exploiting an Arbitrary Hard Disk Read/Write Vulnerability Over NTFS

0 Comments
/
Note: These vulnerabilities remain unpatched at the point of…
Read more →