Cyber Labs - Blogs

PoshC2 - Introducing Native macOS Implants

14 Apr 2021

Over the past few years, we have seen an increase in the number of macOS environments we are...

VM Detection Tricks, Part 3: Hyper-V RAW Network Protocol

7 Apr 2021

This month’s virtual machine detection trick involves detecting the presence of the Hyper-V RAW network protocol. This protocol...

VM Detection Tricks, Part 2: Driver Thread Fingerprinting

12 Mar 2021

This year we’re documenting a series of new and as-yet undocumented VM detection tricks. These detection tricks will...

CVE-2020-24550: Open Redirect in Episerver Find

11 Feb 2021

During the course of our work, we discovered an open redirect vulnerability in Episerver Find. This has...

Introducing FComm - C2 Lateral Movement

27 Jan 2021

Over the past few years, we have found a few edge cases where the traditional lateral movement communication...

VM Detection Tricks, Part 1: Physical memory resource maps

20 Jan 2021

In this series we’ll document a novel and as-yet-undocumented Virtual Machine detection trick for each month of 2021....

PoshC2 Improved HTML Reports

6 Jan 2021

Red team operators need detailed and accurate C2 report output in order to conduct high quality work. Consequently,...

CVE-2020-14418: madCodeHook Library Local Privilege Escalation

1 Dec 2020

Nettitude discovered a vulnerability in the ‘madCodeHook’ third party library which caused a number of security products, including...

CVE-2020-27708: Electronic Arts (EA) Origin - Local Privilege Escalation

3 Nov 2020

We recently assessed the security posture of Electronic Arts Origin Client and discovered a privilege escalation issue that...

Introducing PoshC2 v7.0

20 Aug 2020

There have been some big improvements and new features added to PoshC2 and we’re excited to announce the...

Filter by

PoshC2 - Introducing Native macOS Implants

VM Detection Tricks, Part 3: Hyper-V RAW Network Protocol

VM Detection Tricks, Part 2: Driver Thread Fingerprinting

CVE-2020-24550: Open Redirect in Episerver Find

Introducing FComm - C2 Lateral Movement

VM Detection Tricks, Part 1: Physical memory resource maps

PoshC2 Improved HTML Reports

CVE-2020-14418: madCodeHook Library Local Privilege Escalation

CVE-2020-27708: Electronic Arts (EA) Origin - Local Privilege Escalation

Introducing PoshC2 v7.0

Error

No results found