Cyber Labs - Blogs

An analysis of the RIG exploit kit

27 Oct 2016

Over the last few weeks, we have observed an increase of RIG exploit kit alarms, delivering CrypMIC ransomware. This...

Analysing the NULL SecurityDescriptor kernel exploitation mitigation in the...

13 Oct 2016

We recently discovered a new and quietly released Windows kernel exploitation defence. Exploiting a kernel bug by setting...

From macro to malware - a step by step...

3 Oct 2016

We recently received an email which contained a malicious Word macro. Usually, the only thing that changes between malicious Office...

ZeroPress - A WordPress Vulnerability Hunter

16 Sep 2016

Finding WordPress plugin vulnerabilities is like shooting fish in a barrel. Like taking candy from a baby. Like…...

Rocktastic: A Powerful Wordlist for Penetration Testing

8 Sep 2016

Bigger isn’t always better, but sometimes it is. If you need a huge word list before you...

Introducing 'XSS Payloads' repository: Cross Site Scripting doesn't have...

2 Sep 2016

Sometimes, particularly when dealing with a system perimeter, there’s very little attack surface to deal with. You may find...

PoshC2 v1.0 released, a command and control framework

12 Jul 2016

PoshC2 is a proxy aware command and control framework written completely in PowerShell. It is designed to aid penetration...

QNAP Android: Don't Over Provide

7 Jun 2016

The QNAP Android applications Qnotes 1.1.8.0128 and Qget 2.0.1.1029 suffer from unintended data leakage. A malicious process can...

Escaping the Avast sandbox

19 Apr 2016

An Avast Sandbox escape, CVE-2016-4025, is possible due to a design flaw in the Avast DeepScreen feature. It is...

'Panda Security 2016 Home User' privilege escalation

5 Apr 2016

All Panda Security 2016 home user products for Windows are vulnerable to privilege escalation, CVE-2015-7378, which allows a...

Filter by

An analysis of the RIG exploit kit

Analysing the NULL SecurityDescriptor kernel exploitation mitigation in the...

From macro to malware - a step by step...

ZeroPress - A WordPress Vulnerability Hunter

Rocktastic: A Powerful Wordlist for Penetration Testing

Introducing 'XSS Payloads' repository: Cross Site Scripting doesn't have...

PoshC2 v1.0 released, a command and control framework

QNAP Android: Don't Over Provide

Escaping the Avast sandbox

'Panda Security 2016 Home User' privilege escalation

Error

No results found