LDAP - Know To Attack
When performing internal tests, it's common to use LDAP (Lightweight Directory Access Protocol), but its true purpose, utility, and power are often
DATABASE // PUBLIC ENTRIES
Research Archive
Beerus Framework – Um Novo Framework Mobile Surge
Abstract O Beerus Framework é uma ferramenta ofensiva mobile desenvolvida para facilitar todo o processo de pentest em dispositivos Android. Com uma interface unificada
Beerus Framework – A New Mobile Framework Arises
Abstract The Beerus Framework is an offensive mobile tool developed to simplify the entire pentesting process on Android devices. With a unified interface directly
Who Scans the Scanner? Exploiting Trend Micro Mobile Security
Abstract Trend Micro Mobile Security (TMMS) is widely deployed to protect Android fleets. This research shows how an attacker can subvert that trust. We
Who Scans the Scanner? Exploiting Trend Micro Mobile Security
Abstract Trend Micro Mobile Security (TMMS) is widely deployed to protect Android fleets. This research shows how an attacker can subvert that trust. We
RCE via Pacotes MKP no Checkmk - Execução Remota de Comandos via Interface Web
Resumo Nesta pesquisa conduzida por mim, e pelo Lucas Katashi, identificamos duas vulnerabilidades críticas no Checkmk Enterprise Edition 2.4.0p2, que permitem a
RCE via MKP Packages in Checkmk - Remote Command Execution through the Web Interface
Abstract In this research conducted by me and Lucas Katashi, we identified two critical vulnerabilities in Checkmk Enterprise Edition 2.4.0p2 that allow
![Behind the Bug: Logic Error in Roundcube Session Parser [CVE-2025-49113]](/content/images/size/w720/hakaisecurity-io/wp-content/uploads/2025/06/caixeta.png)
Behind the Bug: Logic Error in Roundcube Session Parser [CVE-2025-49113]
Recently, a vulnerability was discovered in the Roundcube webmail service that allows an authenticated user to obtain remote execution of commands on the server.
Por trás da falha: Erro de Lógica no Parser de Sessão do Roundcube [CVE-2025-49113]
Recentemente, foi descoberta uma vulnerabilidade no serviço de webmail Roundcube que permite a um usuário autenticado obter execução remota de comandos no servidor. A