Cyber Labs |Research, Vulnerability Disclosures & More| LRQA

Process hiving - red teaming whitepaper

2 Sep 2021

Our red team has created a new technique, and accompanying tool, that allows a red team operator to...

Introducing Process Hiving & RunPE

2 Sep 2021

High quality red team operations are research-led. Being able to simulate current and emerging threats at an accurate...

CVE-2020-26153: Event Espresso Core - Cross Site Scripting

25 Jun 2021

Nettitude have identified a Cross Site Scripting (XSS) vulnerability within Event Espresso Core. Event Espresso is a WordPress plugin which...

How jwt hijacking can be prevented

16 Apr 2021

JSON Web Tokens (JWTs) are commonly used in many applications to validate the client's identity. However, there are...

PoshC2 - Introducing Native macOS Implants

14 Apr 2021

Over the past few years, we have seen an increase in the number of macOS environments we are...

VM Detection Tricks, Part 3: Hyper-V RAW Network Protocol

7 Apr 2021

This month’s virtual machine detection trick involves detecting the presence of the Hyper-V RAW network protocol. This protocol...

VM Detection Tricks, Part 2: Driver Thread Fingerprinting

12 Mar 2021

This year we’re documenting a series of new and as-yet undocumented VM detection tricks. These detection tricks will...

CVE-2020-24550: Open Redirect in Episerver Find

11 Feb 2021

During the course of our work, we discovered an open redirect vulnerability in Episerver Find. This has...

Introducing FComm - C2 Lateral Movement

27 Jan 2021

Over the past few years, we have found a few edge cases where the traditional lateral movement communication...

VM Detection Tricks, Part 1: Physical memory resource maps

20 Jan 2021

In this series we’ll document a novel and as-yet-undocumented Virtual Machine detection trick for each month of 2021....

Tools

Tutorials

Blogs

Filter by

Process hiving - red teaming whitepaper

Introducing Process Hiving & RunPE

CVE-2020-26153: Event Espresso Core - Cross Site Scripting

How jwt hijacking can be prevented

PoshC2 - Introducing Native macOS Implants

VM Detection Tricks, Part 3: Hyper-V RAW Network Protocol

VM Detection Tricks, Part 2: Driver Thread Fingerprinting

CVE-2020-24550: Open Redirect in Episerver Find

Introducing FComm - C2 Lateral Movement

VM Detection Tricks, Part 1: Physical memory resource maps

Error

No results found