Cyber Labs - Blogs

DerbyCon 2017 CTF Write Up

28 Sep 2017

The excellent Derbycon 2017 has just come to an end and, just like last year, we competed in the Capture The...

Lifting the clouds from cloud investigations

14 Jul 2017

Nettitude’s IR team recently had an opportunity to investigate a breach in a cloud environment. The client had...

CVE-2017-8116: Teltonika router unauthenticated remote code execution

20 Jun 2017

We sometimes require internet connectivity in situations where a traditional connection is not easily possible. 4G routers provide...

A quick analysis of the latest Shadow Brokers dump

17 Apr 2017

Just in time for Easter, the Shadow Brokers released the latest installment of an NSA data dump, which...

Carbon Black - Security Advisories: CVE-2016-9570, CVE-2016-9568 and CVE-2016-9569

13 Apr 2017

Nettitude have discovered three vulnerabilities in Carbon Black; CVE-2016-9570, CVE-2016-9568 and CVE-2016-9569. Two of these have been patched at the...

Effectively analysing sysmon logs

9 Mar 2017

We previously covered setting up and using sysmon (System Monitor), which is part of the Sysinternals suite from Microsoft. In this...

Putting attackers in hi vis jackets with sysmon

16 Feb 2017

Sysmon (short for system monitor) has been part of the Sysinternals suite for several years. It comprises kernel-mode driver...

More XSS Shenanigans

3 Feb 2017

In September, we released our XSS Payloads collection of scripts and they went down really well within the pen-testing community....

Who owns your runtime?

11 Jan 2017

Can mobile applications trust their own runtime environment? The answer to this burning question that has no doubt...

Fun with Windows binaries - application whitelist bypass using...

15 Dec 2016

We were inspired by the work @subTee has done with application whitelisting. Consequently, we decided to have a hunt around for legitimate...

Filter by

DerbyCon 2017 CTF Write Up

Lifting the clouds from cloud investigations

CVE-2017-8116: Teltonika router unauthenticated remote code execution

A quick analysis of the latest Shadow Brokers dump

Carbon Black - Security Advisories: CVE-2016-9570, CVE-2016-9568 and CVE-2016-9569

Effectively analysing sysmon logs

Putting attackers in hi vis jackets with sysmon

More XSS Shenanigans

Who owns your runtime?

Fun with Windows binaries - application whitelist bypass using...

Error

No results found