![[EN] DNS Query Detection via Direct Packet Inspection](/content/images/size/w720/hakaisecurity-io/wp-content/uploads/2026/02/sid.png)
[EN] DNS Query Detection via Direct Packet Inspection
With knowledge of how operating systems work, it is known that common systems are composed of a kernel (the central part of the system
RESEARCH AREA
en
![[EN] Flow to Shell: Achieving RCE in Node-RED Through Misconfiguration](/content/images/size/w720/hakaisecurity-io/wp-content/uploads/2026/02/Artigo-BASE_Lucas.jpg)
[EN] Flow to Shell: Achieving RCE in Node-RED Through Misconfiguration
With the widespread adoption of workflow automation platforms in corporate environments, these solutions have come to play a critical role in system integration and
![[EN] Understanding Client Fingerprinting: Bot Detection Evasion Using Fingerprint Multilayer Spoofing](/content/images/size/w720/hakaisecurity-io/wp-content/uploads/2026/02/artigo-pedro26.jpg)
[EN] Understanding Client Fingerprinting: Bot Detection Evasion Using Fingerprint Multilayer Spoofing
Your automation script or pentest tool works perfectly in the lab. Requests flow, data returns. But the moment you hit the real target, the
![[EN] A Deep Dive into KeyTabExtractor Techniques](/content/images/size/w720/hakaisecurity-io/wp-content/uploads/2026/01/Artigo-Lucas-e1768326771351.jpg)
[EN] A Deep Dive into KeyTabExtractor Techniques
By: Lucas Hoffmann Revision: Thiago Bispo & Allan Kardec Technical Introduction Many modern corporations rely on Kerberos, a widely used network authentication protocol designed
![[EN] N8Naked: exploring security misconfigurations in N8N](/content/images/size/w720/hakaisecurity-io/wp-content/uploads/2025/12/n8n.png)
[EN] N8Naked: exploring security misconfigurations in N8N
Por: Lucas William ,Lucas Hoffmann e Thiago Bispo Introduction In the second half of 2025, the Hakai DevSec team carried out an incursion into
LDAP - Know To Attack
When performing internal tests, it's common to use LDAP (Lightweight Directory Access Protocol), but its true purpose, utility, and power are often
Beerus Framework – A New Mobile Framework Arises
Abstract The Beerus Framework is an offensive mobile tool developed to simplify the entire pentesting process on Android devices. With a unified interface directly
Who Scans the Scanner? Exploiting Trend Micro Mobile Security
Abstract Trend Micro Mobile Security (TMMS) is widely deployed to protect Android fleets. This research shows how an attacker can subvert that trust. We
Who Scans the Scanner? Exploiting Trend Micro Mobile Security
Abstract Trend Micro Mobile Security (TMMS) is widely deployed to protect Android fleets. This research shows how an attacker can subvert that trust. We