Cyber Labs - Blogs

DerbyCon 2019 CTF Write Up

18 Sep 2019

We recently returned from the always excellent DerbyCon 2019 conference. We once again competed in the 48 hour Capture The...

Cross Site Scripting (XSS) Payload Generator

29 Jul 2019

This post will help you to evade some of those tricky cross site scripting restrictions with the help...

CVE-2018-20319: Why you should always have two factor authentication...

19 Jun 2019

The OpenConnect VPN client, on all supported platforms, suffered from a possible information leak that could result in...

CVE-2019-7315: Genie Access WIP3BVAF IP Camera Directory Traversal

30 May 2019

We have discovered a directory traversal vulnerability that affects Genie Access’ WIP3BVAF WISH IP 3MP IR Auto Focus...

Operational Security with PoshC2 Framework

23 May 2019

This post describes a new capability that has been deployed within PoshC2, which is designed to assist with revealing...

CVE-2017-18019: Privilege Escalation via a Kernel Pointer Dereference

17 Apr 2019

A little while ago, I discovered a vulnerability, CVE-2017-18019, affecting a kernel driver of multiple K7 Computing security products, as well...

Introducing PoshC2 v4.8 - includes C# dropper, task management...

1 Apr 2019

We recently released version 4.8 of PoshC2, which includes a number of fixes and improvements that help facilitate simulated...

CVE-2018-8955: Bitdefender GravityZone Arbitrary Code Execution

16 Oct 2018

We recently identified a vulnerability in the digitally signed Bitdefender GravityZone installer. The vulnerability allows an attacker to...

DerbyCon 2018 CTF Write Up

11 Oct 2018

We have just returned from the always amazing DerbyCon 2018 conference. We competed in the 48 hour Capture the Flag...

CVE-2018-5240: Symantec Management Agent (Altiris) Privilege Escalation

12 Sep 2018

During a recent red team exercise, we discovered a vulnerability within the latest versions of the Symantec Management...

Filter by

DerbyCon 2019 CTF Write Up

Cross Site Scripting (XSS) Payload Generator

CVE-2018-20319: Why you should always have two factor authentication...

CVE-2019-7315: Genie Access WIP3BVAF IP Camera Directory Traversal

Operational Security with PoshC2 Framework

CVE-2017-18019: Privilege Escalation via a Kernel Pointer Dereference

Introducing PoshC2 v4.8 - includes C# dropper, task management...

CVE-2018-8955: Bitdefender GravityZone Arbitrary Code Execution

DerbyCon 2018 CTF Write Up

CVE-2018-5240: Symantec Management Agent (Altiris) Privilege Escalation

Error

No results found