Cyber Labs |Research, Vulnerability Disclosures & More| LRQA

CVE-2022-21972: Windows Server VPN Remote Kernel Use After Free...

10 May 2022

CVE-2022-21972 is a Windows VPN Use after Free (UaF) vulnerability that was discovered through reverse engineering the raspptp.sys...

Introducing SharpWSUS

5 May 2022

Today, we’re releasing a new tool called SharpWSUS. This is a continuation of existing WSUS attack tooling...

Introducing MalSCCM

4 May 2022

During red team operations the goal is often to compromise a system of high value. These systems will...

Repurposing Real TTPs for use on Red Team Engagements

7 Apr 2022

I recently read an interesting article by Elastic. It provides new analysis of a sophisticated, targeted campaign against...

PoshC2 documentation

31 Mar 2022

We maintain PoshC2 documentation over at https://poshc2.readthedocs.io/en/latest/. For your convenience, we have also embedded it below.

Introducing PoshC2 v8.0

30 Mar 2022

We’re thrilled to announce a new release of PoshC2 packed full of new features, modules, major improvements, and...

LRQA discovers high-risk Microsoft vulnerability

22 Mar 2022

Our vulnerability research team recently uncovered a Microsoft bug. In the wrong hands, it would have been damaging...

CVE-2022-23253 - Windows VPN Remote Kernel Null Pointer Dereference

22 Mar 2022

CVE-2022-23253 is a Windows VPN (remote access service) denial of service vulnerability that Nettitude discovered while fuzzing the...

Introducing RunOF - Arbitrary BOF tool

2 Mar 2022

A few years ago, a new feature was added to Cobalt Strike called “Beacon Object Files” (BOFs). These...

Explaining Mass Assignment Vulnerabilities

25 Jan 2022

Programming frameworks have gained popularity due to their ability to make software development easier than using the underlying...

Tools

Tutorials

Blogs

Filter by

CVE-2022-21972: Windows Server VPN Remote Kernel Use After Free...

Introducing SharpWSUS

Introducing MalSCCM

Repurposing Real TTPs for use on Red Team Engagements

PoshC2 documentation

Introducing PoshC2 v8.0

LRQA discovers high-risk Microsoft vulnerability

CVE-2022-23253 - Windows VPN Remote Kernel Null Pointer Dereference

Introducing RunOF - Arbitrary BOF tool

Explaining Mass Assignment Vulnerabilities

Error

No results found