Cyber Labs - Blogs

CVE-2018-12897: Solarwinds Dameware Mini Remote Control Local SEH Buffer...

5 Sep 2018

Dameware Mini Remote Control (MRC) is a remote administration utility allowing remote access to end user devices for...

Introducing Scrounger - iOS and Android mobile application penetration...

23 Aug 2018

Scrounger is a modular tool designed to perform the routine tasks required during a mobile application security assessment. ...

Extending C2 Lateral Movement – Invoke-Pbind

16 Aug 2018

Invoke-Pbind is a mini post exploitation framework written in PowerShell, which builds C2 communications over SMB named pipes...

Using PoolTags to Fingerprint Hosts

8 Aug 2018

Commonly, malware will fingerprint the host it executes on, in an attempt to discover more about its environment...

CVE-2017-16245 & CVE-2017-16246: Avecto Defendpoint Multiple Vulnerabilities

30 Jul 2018

This post focuses on the “application control” aspect of Avecto. Last year I discovered two vulnerabilities in the...

Python Server for PoshC2

26 Jul 2018

We are delighted to announce the release of our PoshC2 Python Server, allowing cross-platform support.

COM and the PowerThIEf

10 Jul 2018

Recently, Component Object Model (COM) has come back in a big way, particularly with regards to it being...

CVE-2018-6851 to CVE-2018-6857: Sophos Privilege Escalation Vulnerabilities

25 Jun 2018

We have recently disclosed a list of vulnerabilities to Sophos that allow local attackers to elevate their privileges...

CVE-2018-10956: Unauthenticated Privileged Directory Traversal in IPConfigure Orchid Core...

14 Jun 2018

IPConfigure Orchid Core VMS is a Video Management System that is vulnerable to a directory traversal attack, which...

Introducing Prowl

5 Jun 2018

Prowl was initially designed as an in house tool to aid engagements where there’s a requirement to capture...

Filter by

CVE-2018-12897: Solarwinds Dameware Mini Remote Control Local SEH Buffer...

Introducing Scrounger - iOS and Android mobile application penetration...

Extending C2 Lateral Movement – Invoke-Pbind

Using PoolTags to Fingerprint Hosts

CVE-2017-16245 & CVE-2017-16246: Avecto Defendpoint Multiple Vulnerabilities

Python Server for PoshC2

COM and the PowerThIEf

CVE-2018-6851 to CVE-2018-6857: Sophos Privilege Escalation Vulnerabilities

CVE-2018-10956: Unauthenticated Privileged Directory Traversal in IPConfigure Orchid Core...

Introducing Prowl

Error

No results found