GLPI - SQL injection through dynamic reports
This post details the journey of our Research Team in uncovering a SQL Injection vulnerability in GLPI, an open-source ITSM tool predominantly used
DATABASE // PUBLIC ENTRIES
Research Archive
BEERUS.APK - Spotlighting sandbox exfiltration
It is widely recognized that information storage poses a security risk, especially in the context of mobile devices. In the analyses conducted by our
Hunting for Nginx Alias Traversals in the wild
Nginx, a versatile web server pivotal to numerous internet infrastructures, has held a dominant market share since its inception in 2004, with widespread adoption
Coffee: A COFF loader made in Rust
Abstract COFF stands for Common Object File Format, it is the file format generated by compilers after the code-generation stage, they typically only
Reconnaissance like a cyber scout - Part 3. Final.
Shalom Kravim Seebernetiyim! (Greetings cyber warriors) we are back to conclude our series in Reconnaissance Like a Cyber Scout. In this part, the author
Reconnaissance like a cyber scout - Part 2.
Salutations fellas! I'm back for the second part of our series on perimeter reconnaissance. Remembering that we reached half of our content,
Reconnaissance like a cyber scout - Part 1.
Greetings dear readers, how are you?! May the god of hacking be present in your lives! All kidding aside, through this article, which will
Purple Team Tips and Tricks: Revisiting Kerberos Enum
There are different methodologies proposed to define the stages of a Red Team assessment, regardless of the chosen methodology, most agree on the importance
Fortigate - Authentication Bypass Lead to Full Device Takeover
1Day vulnerability research by Hakai - Research Team This post is about the journey to create a Proof-of-concept about CVE-2022-40684, this