Written by Cedric Halbronn On Saturday 15th February, I gave a talk titled “How CVE-2018-8611 Can be Exploited to Achieve Privilege Escalation on Windows 10 1809 (RS5) and Earlier”. Thi…

Starting Sept. 1, Safari will no longer trust SSL/TLS certificates with validity periods longer than 398 days Starting Sept. 1, Apple’s Safari browser will no longer trust SSL/TLS leaf certificates...

Posted in r/netsec by u/HanSolo71 • 2 points and 0 comments

As RedTeaming has grown with the industry, so has our need to build dependable environments. In keeping with the cat-and-mouse game we find ourselves in, it’s essential to possess the...

Introduction Back in 2018, PaloAlto Unit42 publicly documented RGDoor, an IIS backdoor used by the APT34. The article highlighted some details which sparked my interest and inspired me to write...

The open-source tool Malboxes now makes malware analysis safer by deploying directly into the Amazon AWS cloud removing the requirement of operating a local dirty network.

A new Insider Risk Management solution within Microsoft 365 uses machine learning to intelligently detect potentially risky behavior within a company.

Another Subdomain ENumeration Tool. Contribute to cinerieus/as3nt development by creating an account on GitHub.

Posted in r/netsec by u/irckeyboardwarrior • 3 points and 7 comments

Posted in r/netsec by u/securisec • 1 point and 0 comments

After buying a Model 3 in June of 2019, I began deep diving into understanding how my new car works. My interest largely being the…

This article is part of a broader series on opposition research and OSINT. If you would like to contribute or want to suggest an amendment or work with me on my upcoming articles on Facebook,

Posted in r/netsec by u/XVilka • 5 points and 1 comment

Posted in r/netsec by u/PickleeeeeRick • 3 points and 0 comments

Zetta was a hard rated box that had some interesting vulnerabilities. An unfinished dual-stack implementation was used to leak the IPv6 address of the server which exposed a rsync service. Write access to rsync was used to write to an authorized_keys file…

Slack Group Before we get started I have started a slack group dedicated to hacking. We welcome everyone from beginner…

[https://github.com/RedCursorSecurityConsulting/CVE-2020-0668](https://www.google.com/url?q=https://github.com/RedCursorSecurityConsulting/CVE-2020...

For more than half a century, governments all over the world trusted a single company to keep the communications of their spies, soldiers and diplomats secret. That company was secretly run by the …

A quick status update by Mitja Kolsek, the 0patch Team [Update 2/22/2020: More details on the exploit code for CVE-2020-0674 were publis...