PT-BR - Beerus Framework: iOS - O canivete suíço para iOS
Em julho deste ano, lançamos a v1.1 do Beerus Framework para Android. Agora, em setembro, damos mais um passo na evolução do projeto
DATABASE // PUBLIC ENTRIES
Archive
ESC
No matching entries found.
EN - Beerus Framework: iOS - The Swiss Army Knife for iOS
This past July, we released v1.1 of the Beerus Framework for Android. Now, in September, we take another step in the project'
![[PT-BR] CVE-2026-40083: SQL Injection no Cacti](/content/images/size/w720/hakaisecurity-io/wp-content/uploads/2026/08/artigo_blog_cacti.png)
[PT-BR] CVE-2026-40083: SQL Injection no Cacti
Resumo A equipe de pesquisa Yokai, da Hakai Security, identificou uma vulnerabilidade de Injeção de SQL nas versões do Cacti <= 1.2.30.
![[EN] CVE-2026-40083: SQL Injection in Cacti](/content/images/size/w720/hakaisecurity-io/wp-content/uploads/2026/08/en_artigo_blog_cacti.png)
[EN] CVE-2026-40083: SQL Injection in Cacti
Summary The Yokai research team, from Hakai Security, identified a SQL Injection vulnerability in Cacti versions <= 1.2.30. The flaw allows an
CVE-2026-42931: DoS por leitura ilimitada do corpo da requisição no endpoint npm do Gitea
Abstract Quanto de memória uma pequena requisição destinada a alterar a tag de um pacote deveria consumir? Em condições normais, apenas alguns bytes. Afinal,
CVE-2026-42931: DoS via Unbounded Request Body Read in Gitea’s npm Endpoint
Abstract How much memory should a small request intended to change a package's tag consume? Under normal conditions, just a few bytes.
![[EN] Build Your Nightmare - Dissecting CVE-2026-12191](/content/images/size/w720/hakaisecurity-io/wp-content/uploads/2026/07/bispocveen.png)
[EN] Build Your Nightmare - Dissecting CVE-2026-12191
Summary As the global autonomous vehicle market grows, the security of critical driver assistance systems may be hanging by a thread. Our recent research
![[PT-BR] Build Your Nightmare - Destrinchando a CVE-2026-12191](/content/images/size/w720/hakaisecurity-io/wp-content/uploads/2026/07/bispocve.png)
[PT-BR] Build Your Nightmare - Destrinchando a CVE-2026-12191
Resumo Enquanto o mercado global de veículos autônomos cresce, a segurança de sistemas críticos de assistência à direção pode estar por um fio. Nossa
Beerus Framework: v1.1 - KernelSU, gRPC Transport and Fixes
A few months after the initial release of the Beerus Framework, we are publishing version v1.1, a minor update that brings support for
Beerus Framework: v1.1 - KernelSU, gRPC Transport e Correções
Alguns meses após o lançamento inicial do Beerus Framework, estamos publicando a versão v1.1, uma atualização minor que traz suporte a novos ambientes
Discovering 0-days in HTML-to-PDF Generators (90 million monthly targets)
By Pedro "gankd" Cruz — Pentest Analyst and Vulnerability Researcher at Hakai Security. Almost every feature-rich application emits a PDF at some
Descobrindo 0-days em Geradores HTML-to-PDF (90 milhões de alvos mensais)
* Por Pedro "gankd" Cruz — Pentest Analyst & Vulnerability Researcher na Hakai Security. Quase toda aplicação com diversas funcionalidades emite PDF em algum
![[EN] CVE-2026-44706: SQL Injection in Chatwoot FilterService](/content/images/size/w720/hakaisecurity-io/wp-content/uploads/2026/06/blog_sqlinjec.png)
[EN] CVE-2026-44706: SQL Injection in Chatwoot FilterService
Summary The Hakai Security Research Team has identified a critical SQL Injection vulnerability in Chatwoot versions <= 4.11.1 that allows any authenticated
[PT-BR] CVE-2026-44706: SQL Injection in Chatwoot FilterService
Resumo A Equipe de Pesquisa da Hakai identificou uma vulnerabilidade crítica de Injeção de SQL nas versões do Chatwoot <= 4.11.1 que
Reverse Engineering SmartLoader: Where Commodity Malware and Operational Tooling Diverge
Introduction SmartLoader is a commodity loader currently in active deployment, attributed to Malware-as-a-Service infrastructure that has been linked to LummaStealer delivery
![[EN] CVE-2026-4802: Command execution on Cockpit](/content/images/size/w720/hakaisecurity-io/wp-content/uploads/2026/05/artigo_blog_cockpit.png)
[EN] CVE-2026-4802: Command execution on Cockpit
A command injection vulnerability has been identified in Cockpit, discovered by Hakai's Research team. The flaw allows an authenticated user, even without
[PT-BR] CVE-2026-4802: Command execution on Cockpit
Foi identificada uma vulnerabilidade de injeção de comandos no Cockpit, descoberta pelo time de Research da Hakai. A falha permite que um usuário autenticado,
![[EN] CVE-2026-33725: Technical Analysis and Proof of Concept](/content/images/size/w720/hakaisecurity-io/wp-content/uploads/2026/05/artigo_blog_metabase.png)
[EN] CVE-2026-33725: Technical Analysis and Proof of Concept
On March 24, 2026, a high-criticality vulnerability was identified in Metabase Enterprise leading to remote command execution, discovered by "Hacktron AI and
CVE-2026-33725: Technical Analysis and Proof of Concept
Em 24 de março de 2026, foi identificada uma vulnerabilidade de alta criticidade no Metabase Enterprise que leva à execução remota de comandos, descoberta
Chupabase: Extracting Data from Misconfigured Lovable Applications
Abstract Applications developed with vibe coding platforms are significantly lowering the barrier to entry for software creation. Tools like Lovable allow users to build
Chupabase: Extraindo dados de aplicações Lovable mal configuradas
Resumo Aplicações desenvolvidas com plataformas de vibe coding vêm reduzindo significativamente a barreira de entrada para a criação de software. Ferramentas como a Lovable
Um caractere para o Account Takeover
Introdução Em um mundo digital cada vez mais dinâmico e globalizado, a segurança das contas online é fundamental. Um dos vetores de ataque mais
CVE-2026-25769: RCE via insecure deserialization in wazuh cluster - remote command execution through cluster protocol
Abstract In this research, Hakai Security Research Team has identified a critical Remote Code Execution (RCE) vulnerability in Wazuh versions up to 4.14.
![[PT-BR] Deep Looking into Centreon](/content/images/size/w720/hakaisecurity-io/wp-content/uploads/2026/03/texugo.png)
[PT-BR] Deep Looking into Centreon
Introdução Nesta pesquisa, foi identificada três vulnerabilidades críticas no Centreon Web e no módulo Centreon Open Tickets, que permitem desde a extração completa do
[EN] Deep Looking into Centreon
Summary In this research, three critical vulnerabilities were identified in Centreon Web and the Centreon Open Tickets module, allowing everything from full database extraction
![[EN] DNS Query Detection via Direct Packet Inspection](/content/images/size/w720/hakaisecurity-io/wp-content/uploads/2026/02/sid.png)
[EN] DNS Query Detection via Direct Packet Inspection
With knowledge of how operating systems work, it is known that common systems are composed of a kernel (the central part of the system
[PT-BR] DNS Query Detection via Direct Packet Inspection
Com o conhecimento sobre o funcionamento de sistemas operacionais, é sabido que os sistemas comuns são compostos de um kernel (parte central do sistema
![[EN] Flow to Shell: Achieving RCE in Node-RED Through Misconfiguration](https://hakaisecurity.io/wp-content/uploads/2026/02/Artigo-BASE_Lucas.jpg)
[EN] Flow to Shell: Achieving RCE in Node-RED Through Misconfiguration
With the widespread adoption of workflow automation platforms in corporate environments, these solutions have come to play a critical role in system integration and
[PT-BR] Flow to Shell: Achieving RCE in Node-RED Through Misconfiguration
Com a ampla adoção de plataformas de automação de fluxos em ambientes corporativos, essas soluções passaram a desempenhar um papel crítico na integração de
![[EN] Understanding Client Fingerprinting: Bot Detection Evasion Using Fingerprint Multilayer Spoofing](/content/images/size/w720/hakaisecurity-io/wp-content/uploads/2026/02/artigo-pedro26.jpg)
[EN] Understanding Client Fingerprinting: Bot Detection Evasion Using Fingerprint Multilayer Spoofing
Your automation script or pentest tool works perfectly in the lab. Requests flow, data returns. But the moment you hit the real target, the
[PT-BR] Understanding Client Fingerprinting: Bot Detection Evasion Using Fingerprint Multilayer Spoofing
Seu script de automação ou ferramenta de pentest funciona perfeitamente no laboratório. As requisições fluem, os dados retornam. Mas no momento em que você
CVE-2026-24061: Execução remota de código no Telnetd - análise técnica e prova de conceito
Em 20 de janeiro de 2026, foi identificada uma vulnerabilidade crítica de bypass de autenticação no serviço GNU telnetd, descoberta por Kyu Neushwaistein (Carlos
![[EN] A Deep Dive into KeyTabExtractor Techniques](https://hakaisecurity.io/wp-content/uploads/2026/01/Artigo-Lucas-e1768326771351.jpg)
[EN] A Deep Dive into KeyTabExtractor Techniques
By: Lucas Hoffmann Revision: Thiago Bispo & Allan Kardec Technical Introduction Many modern corporations rely on Kerberos, a widely used network authentication protocol designed
![[PT-BR] N8Naked: exploring security misconfigurations in N8N](https://hakaisecurity.io/wp-content/uploads/2025/12/n8n.png)
[PT-BR] N8Naked: exploring security misconfigurations in N8N
Por: Lucas William ,Lucas Hoffmann e Thiago Bispo Introdução No segundo semestre de 2025 o time de DevSec da Hakai atuou em uma incursão
[EN] N8Naked: exploring security misconfigurations in N8N
Por: Lucas William ,Lucas Hoffmann e Thiago Bispo Introduction In the second half of 2025, the Hakai DevSec team carried out an incursion into
LDAP - Entender Para Atacar
Quando realizamos testes internos, é comum o uso do LDAP (Lightweight Directory Access Protocol), mas pouco se entende sobre sua real função, utilidade e
LDAP - Know To Attack
When performing internal tests, it's common to use LDAP (Lightweight Directory Access Protocol), but its true purpose, utility, and power are often
Beerus Framework – Um Novo Framework Mobile Surge
Abstract O Beerus Framework é uma ferramenta ofensiva mobile desenvolvida para facilitar todo o processo de pentest em dispositivos Android. Com uma interface unificada
Beerus Framework – A New Mobile Framework Arises
Abstract The Beerus Framework is an offensive mobile tool developed to simplify the entire pentesting process on Android devices. With a unified interface directly
Who Scans the Scanner? Exploiting Trend Micro Mobile Security
Abstract Trend Micro Mobile Security (TMMS) is widely deployed to protect Android fleets. This research shows how an attacker can subvert that trust. We
Who Scans the Scanner? Exploiting Trend Micro Mobile Security
Abstract Trend Micro Mobile Security (TMMS) is widely deployed to protect Android fleets. This research shows how an attacker can subvert that trust. We
RCE via Pacotes MKP no Checkmk - Execução Remota de Comandos via Interface Web
Resumo Nesta pesquisa conduzida por mim, e pelo Lucas Katashi, identificamos duas vulnerabilidades críticas no Checkmk Enterprise Edition 2.4.0p2, que permitem a
RCE via MKP Packages in Checkmk - Remote Command Execution through the Web Interface
Abstract In this research conducted by me and Lucas Katashi, we identified two critical vulnerabilities in Checkmk Enterprise Edition 2.4.0p2 that allow
![Behind the Bug: Logic Error in Roundcube Session Parser [CVE-2025-49113]](/content/images/size/w720/hakaisecurity-io/wp-content/uploads/2025/06/caixeta.png)
Behind the Bug: Logic Error in Roundcube Session Parser [CVE-2025-49113]
Recently, a vulnerability was discovered in the Roundcube webmail service that allows an authenticated user to obtain remote execution of commands on the server.
Por trás da falha: Erro de Lógica no Parser de Sessão do Roundcube [CVE-2025-49113]
Recentemente, foi descoberta uma vulnerabilidade no serviço de webmail Roundcube que permite a um usuário autenticado obter execução remota de comandos no servidor. A
Defenda sua casa: modelagem de ameaças no mundo real – parte 2 de 3
Introdução Na primeira parte do artigo sobre modelagem de ameaças, concentramos nossos esforços na fundamentação teórica, abordando o desenvolvimento e as metodologias distintas. Agora,
Defend your home: Real-world Threat Modeling – Part 2 of 3
Introduction In the first blog post about threat modeling we focused our efforts on the theoretical basis, addressing the development and different methodologies. Now,
Malicious MSI – Tornando o MSI em uma arma
Abstract Este artigo examina o formato Windows Installer (MSI) sob a perspectiva da segurança da informação, explorando como sua estrutura e funcionalidades podem ser
AI and Voice Deepfakes: How Did We Created One?
Download final.wav We live in an era where technology is advancing at an incredibly fast pace. Tools that were once exclusive to laboratories
IA e Deepfakes de Voz: Como Criamos Um?
Download final.wav Vivemos em uma era onde a tecnologia avança em um ritmo muito rápido. Ferramentas que antes eram exclusivas de laboratórios e
Contas de Serviço Gerenciadas por Grupo: solução contra Kerberoasting ou incentivo ao ataque Golden GMSA?
Introdução Para profissionais de segurança da informação ou administradores de sistemas, a gestão de contas de usuários é sempre um desafio, e, quando se
Group Managed Service Accounts: A Solution Against Kerberoasting or an Incentive for Golden GMSA Attacks?
Introduction For information security professionals or system administrators, user account management is always challenging. When it comes to service accounts, the problem becomes even
O lado obscuro do JWT: Explorando vulnerabilidades em Tokens.
Muitas aplicações modernas utilizam JSON Web Tokens (JWTs) para autenticar e autorizar usuários em suas funcionalidades. Neste artigo, exploraremos vulnerabilidades em JWTs que podem
The Dark Side of JWT: Exploiting Token Vulnerabilities
Many modern applications use JSON Web Tokens (JWTs) to authenticate and authorize users in their functionalities. In this article, we will explore vulnerabilities in
Economize dinheiro escovando os dentes - desvendando a Modelagem de Ameaças - parte 1 de 3.
A modelagem de ameaças é um processo cíclico para evitar problemas de segurança futuros. Assim como escovar os dentes, que previne cáries, tártaro ou
Save money brushing your teeth - unveiling the Threat Modeling - part 1 of 3
Threat modeling is a cyclic process to avoid future problems. Just like brushing your teeth, that prevents decay, tartar or dental calculus, threat modeling
Stealer Logs: An in-depth analysis of over half a billion stolen credentials
Key Findings * We analyzed over 590 million credentials from more than 20 million unique infected computers worldwide. * Brazil is one of the most affected
Stealer Logs: Uma análise aprofundada de mais de meio bilhão de credenciais roubadas
Constatações importantes * Analisamos mais de 590 milhões de credenciais provenientes de mais de 20 milhões de computadores únicos infectados em todo o mundo. * O
Malware that detects Wine and infects both Windows and Linux?
If you are a slightly above-average user – and you certainly are; otherwise, you wouldn't be reading this article =D – you'
Malwares que detectam o Wine e infectam o Windows E o Linux?
Se você é um usuário um pouco acima do comum - certamente você é, caso contrário não estaria lendo esse artigo =D – já viu a
Incidente do CrowdStrike: Uma rápida análise do Pré-Apocalipse
"Essa noite, eu tive um sonho de sonhadorMaluco que sou, eu sonheiCom o dia em que a Terra parouCom o dia em que
Avoiding unrestricted file upload - straight to the source
File uploads have become essential for numerous web applications, ranging from social media platforms to cloud storage services. They enable users to easily share
OsCommerce v4 RCE: Unveiling the file upload bypass threat
In my recent research, I identified a critical vulnerability in osCommerce v4, specifically a Remote Code Execution (RCE) vulnerability enabled by bypassing file upload
Reconhecimento como um cyber scout - Parte 1.
Saudações, queridos leitores! Como estão vocês? Que o deus do hacking esteja presente em suas vidas! Brincadeiras à parte, através deste artigo, que na
Dicas e Truques de Purple team: Revisitando a Enumeração do Kerberos
Existem diferentes metodologias propostas para definir as etapas de uma avaliação da Red team. Independentemente da metodologia escolhida, a maioria concorda com a importância
Fortigate - Autenticação de Desvio Levando à Assunção Completa do Dispositivo
Pesquisa de vulnerabilidade 1Day pela Equipe de Pesquisa da Hakai Este post trata da jornada para criar uma Prova de Conceito sobre a CVE-
SQL Injection e Vulnerabilidade XSS no Centreon
Eu sou Daniel França Lima e sou pentester Jr e pesquisador de vulnerabilidades na Hakai Offensive Security. Com o objetivo de ajudar a comunidade
Windows Admin-to-Kernel Elevation of Privilege (CVE-2024-21338)
Abstract On February 13th, 2024, during the patch Tuesday, Microsoft disclosed the CVE-2024-21338 based on the security report made by Jan Vojtěšek
From a SSRF to the creation of gcp_enum
In this article, we will discuss a case of SSRF in a GCP environment and how exploiting this vulnerability led to the idea and
Error 404: Your Security Not Found – Tales of Web Vulnerabilities
Greetings to all, This article aims to provide insights and stories about vulnerabilities in web applications and their impacts. Throughout this text, I will
GLPI - SQL injection through dynamic reports
This post details the journey of our Research Team in uncovering a SQL Injection vulnerability in GLPI, an open-source ITSM tool predominantly used
BEERUS.APK - Spotlighting sandbox exfiltration
It is widely recognized that information storage poses a security risk, especially in the context of mobile devices. In the analyses conducted by our
Hunting for Nginx Alias Traversals in the wild
Nginx, a versatile web server pivotal to numerous internet infrastructures, has held a dominant market share since its inception in 2004, with widespread adoption
Coffee: A COFF loader made in Rust
Abstract COFF stands for Common Object File Format, it is the file format generated by compilers after the code-generation stage, they typically only
Reconnaissance like a cyber scout - Part 3. Final.
Shalom Kravim Seebernetiyim! (Greetings cyber warriors) we are back to conclude our series in Reconnaissance Like a Cyber Scout. In this part, the author
Reconnaissance like a cyber scout - Part 2.
Salutations fellas! I'm back for the second part of our series on perimeter reconnaissance. Remembering that we reached half of our content,
Reconnaissance like a cyber scout - Part 1.
Greetings dear readers, how are you?! May the god of hacking be present in your lives! All kidding aside, through this article, which will
Purple Team Tips and Tricks: Revisiting Kerberos Enum
There are different methodologies proposed to define the stages of a Red Team assessment, regardless of the chosen methodology, most agree on the importance
Fortigate - Authentication Bypass Lead to Full Device Takeover
1Day vulnerability research by Hakai - Research Team This post is about the journey to create a Proof-of-concept about CVE-2022-40684, this
SQL Injection and XSS Vulnerability on Centreon
I'm Daniel França Lima and i'm a penetration tester Jr and vulnerability researcher at Hakai Offensive Security. In order to