LDAP - Know To Attack
When performing internal tests, it's common to use LDAP (Lightweight Directory Access Protocol), but its true purpose, utility, and power are often
RESEARCH AREA
en
Beerus Framework – A New Mobile Framework Arises
Abstract The Beerus Framework is an offensive mobile tool developed to simplify the entire pentesting process on Android devices. With a unified interface directly
Who Scans the Scanner? Exploiting Trend Micro Mobile Security
Abstract Trend Micro Mobile Security (TMMS) is widely deployed to protect Android fleets. This research shows how an attacker can subvert that trust. We
Who Scans the Scanner? Exploiting Trend Micro Mobile Security
Abstract Trend Micro Mobile Security (TMMS) is widely deployed to protect Android fleets. This research shows how an attacker can subvert that trust. We
RCE via MKP Packages in Checkmk - Remote Command Execution through the Web Interface
Abstract In this research conducted by me and Lucas Katashi, we identified two critical vulnerabilities in Checkmk Enterprise Edition 2.4.0p2 that allow
![Behind the Bug: Logic Error in Roundcube Session Parser [CVE-2025-49113]](/content/images/size/w720/hakaisecurity-io/wp-content/uploads/2025/06/caixeta.png)
Behind the Bug: Logic Error in Roundcube Session Parser [CVE-2025-49113]
Recently, a vulnerability was discovered in the Roundcube webmail service that allows an authenticated user to obtain remote execution of commands on the server.
Defend your home: Real-world Threat Modeling – Part 2 of 3
Introduction In the first blog post about threat modeling we focused our efforts on the theoretical basis, addressing the development and different methodologies. Now,
AI and Voice Deepfakes: How Did We Created One?
Download final.wav We live in an era where technology is advancing at an incredibly fast pace. Tools that were once exclusive to laboratories
Group Managed Service Accounts: A Solution Against Kerberoasting or an Incentive for Golden GMSA Attacks?
Introduction For information security professionals or system administrators, user account management is always challenging. When it comes to service accounts, the problem becomes even