Cyber Labs - Blogs

Introducing PoshC2 v8.0

30 Mar 2022

We’re thrilled to announce a new release of PoshC2 packed full of new features, modules, major improvements, and...

CVE-2022-23253 - Windows VPN Remote Kernel Null Pointer Dereference

22 Mar 2022

CVE-2022-23253 is a Windows VPN (remote access service) denial of service vulnerability that Nettitude discovered while fuzzing the...

Introducing RunOF - Arbitrary BOF tool

2 Mar 2022

A few years ago, a new feature was added to Cobalt Strike called “Beacon Object Files” (BOFs). These...

Explaining Mass Assignment Vulnerabilities

25 Jan 2022

Programming frameworks have gained popularity due to their ability to make software development easier than using the underlying...

Introducing Process Hiving & RunPE

2 Sep 2021

High quality red team operations are research-led. Being able to simulate current and emerging threats at an accurate...

CVE-2020-26153: Event Espresso Core - Cross Site Scripting

25 Jun 2021

Nettitude have identified a Cross Site Scripting (XSS) vulnerability within Event Espresso Core. Event Espresso is a WordPress plugin which...

PoshC2 - Introducing Native macOS Implants

14 Apr 2021

Over the past few years, we have seen an increase in the number of macOS environments we are...

VM Detection Tricks, Part 3: Hyper-V RAW Network Protocol

7 Apr 2021

This month’s virtual machine detection trick involves detecting the presence of the Hyper-V RAW network protocol. This protocol...

VM Detection Tricks, Part 2: Driver Thread Fingerprinting

12 Mar 2021

This year we’re documenting a series of new and as-yet undocumented VM detection tricks. These detection tricks will...

CVE-2020-24550: Open Redirect in Episerver Find

11 Feb 2021

During the course of our work, we discovered an open redirect vulnerability in Episerver Find. This has...

Filter by

Introducing PoshC2 v8.0

CVE-2022-23253 - Windows VPN Remote Kernel Null Pointer Dereference

Introducing RunOF - Arbitrary BOF tool

Explaining Mass Assignment Vulnerabilities

Introducing Process Hiving & RunPE

CVE-2020-26153: Event Espresso Core - Cross Site Scripting

PoshC2 - Introducing Native macOS Implants

VM Detection Tricks, Part 3: Hyper-V RAW Network Protocol

VM Detection Tricks, Part 2: Driver Thread Fingerprinting

CVE-2020-24550: Open Redirect in Episerver Find

Error

No results found