Welcome to Nettitude Labs
You are here: Home
EMEA
1 Jephson Court
Trancred Close
Leamington Spa
Warwickshire
CV31 3RZ
Trancred Close
Leamington Spa
Warwickshire
CV31 3RZ
Americas
50 Broad Street
Suite 403
New York
NY
10004
Suite 403
New York
NY
10004
Cross Site Scripting (XSS) Payload Generator
/0 Comments/in Blog /by Iain WallaceThis post will help you to evade some of those tricky cross site scripting restrictions with the help of a new tool I’ve pushed to our XSS Payloads repository. There are times during a web application penetration test when Cross Site Scripting (XSS) has been identified with a trivial payload such as <script>alert(1)</script> or via […]
CVE-2018-20319: Why you should always have two factor authentication on your VPN
/0 Comments/in Blog /by Tom WilsonThe OpenConnect VPN client, on all supported platforms, suffered from a possible information leak that could result in an attacker with elevated local privileges obtaining plaintext credentials. This VPN security vulnerability has now been patched and assigned CVE-2018-20319. Affected Software Vendor website: https://www.infradead.org/openconnect/ Affected versions: OpenConnect client – Windows, Linux, Mac OS X, Android, Solaris, […]
CVE-2019-7315: Genie Access WIP3BVAF IP Camera Directory Traversal
/0 Comments/in Blog /by Ben HackmanWe have discovered a directory traversal vulnerability that affects Genie Access’ WIP3BVAF WISH IP 3MP IR Auto Focus Bullet Camera. This security vulnerability can act as the first step to full device compromise and has been assigned CVE-2019-7315. Proof of concept (PoC) of path traversal vulnerability discovered The directory traversal vulnerability can be exploited via […]
Operational Security with PoshC2 Framework
/0 Comments/in Blog /by Doug McLeodThis post describes a new capability that has been deployed within PoshC2, which is designed to assist with revealing a wider set of target environment variables at the dropper stage, as part of operational security controls. Imagine the following scenario. You’ve deployed IP address white-listing on a proxy in order to limit implant installation to […]
CVE-2017-18019: Privilege Escalation via a Kernel Pointer Dereference
/0 Comments/in Blog /by Kyriakos EconomouA little while ago, I discovered a vulnerability, CVE-2017-18019, affecting a kernel driver of multiple K7 Computing security products, as well as the products of Defenx, both for Windows. Both were affected because they were using the same anti virus engine, and both are now patched. The proof of concept was based on an invalid […]
Introducing PoshC2 v4.8 – includes C# dropper, task management and more! – Part One
/0 Comments/in Blog, PoshC2 /by Rob BoneWe recently released version 4.8 of PoshC2, which includes a number of fixes and improvements that help facilitate simulated attacks. This is the first post in a series of posts that will include some of the details around the fixes and updates, alongside a number of other posts which will show some of the other […]