Cyber Labs - Blogs

Making PoshC2 More Accessible With a $5 VPS

31 Jan 2018

Users may find it difficult to host a PoshC2 server as it requires a Windows host, either directly...

CVE-2019-9702: Symantec Encryption Desktop Local Privilege Escalation - Exploiting...

28 Nov 2017

These vulnerabilities remain unpatched at the point of publication. We have been working with Symantec to try and...

PoshC2 v3 with SOCKS Proxy (SharpSocks)

15 Nov 2017

We’ve been working on quite a few changes since the release of PoshC2 v2, our public Command &...

DerbyCon 2017 CTF Write Up

28 Sep 2017

The excellent Derbycon 2017 has just come to an end and, just like last year, we competed in the Capture The...

Lifting the clouds from cloud investigations

14 Jul 2017

Nettitude’s IR team recently had an opportunity to investigate a breach in a cloud environment. The client had...

CVE-2017-8116: Teltonika router unauthenticated remote code execution

20 Jun 2017

We sometimes require internet connectivity in situations where a traditional connection is not easily possible. 4G routers provide...

A quick analysis of the latest Shadow Brokers dump

17 Apr 2017

Just in time for Easter, the Shadow Brokers released the latest installment of an NSA data dump, which...

Carbon Black - Security Advisories: CVE-2016-9570, CVE-2016-9568 and CVE-2016-9569

13 Apr 2017

Nettitude have discovered three vulnerabilities in Carbon Black; CVE-2016-9570, CVE-2016-9568 and CVE-2016-9569. Two of these have been patched at the...

Effectively analysing sysmon logs

9 Mar 2017

We previously covered setting up and using sysmon (System Monitor), which is part of the Sysinternals suite from Microsoft. In this...

Putting attackers in hi vis jackets with sysmon

16 Feb 2017

Sysmon (short for system monitor) has been part of the Sysinternals suite for several years. It comprises kernel-mode driver...

Filter by

Making PoshC2 More Accessible With a $5 VPS

CVE-2019-9702: Symantec Encryption Desktop Local Privilege Escalation - Exploiting...

PoshC2 v3 with SOCKS Proxy (SharpSocks)

DerbyCon 2017 CTF Write Up

Lifting the clouds from cloud investigations

CVE-2017-8116: Teltonika router unauthenticated remote code execution

A quick analysis of the latest Shadow Brokers dump

Carbon Black - Security Advisories: CVE-2016-9570, CVE-2016-9568 and CVE-2016-9569

Effectively analysing sysmon logs

Putting attackers in hi vis jackets with sysmon

Error

No results found