![[EN] Flow to Shell: Achieving RCE in Node-RED Through Misconfiguration](https://hakaisecurity.io/wp-content/uploads/2026/02/Artigo-BASE_Lucas.jpg)
[EN] Flow to Shell: Achieving RCE in Node-RED Through Misconfiguration
With the widespread adoption of workflow automation platforms in corporate environments, these solutions have come to play a critical role in system integration and
RESEARCH AREA
Research Blog
[PT-BR] Flow to Shell: Achieving RCE in Node-RED Through Misconfiguration
Com a ampla adoção de plataformas de automação de fluxos em ambientes corporativos, essas soluções passaram a desempenhar um papel crítico na integração de
![[EN] Understanding Client Fingerprinting: Bot Detection Evasion Using Fingerprint Multilayer Spoofing](/content/images/size/w720/hakaisecurity-io/wp-content/uploads/2026/02/artigo-pedro26.jpg)
[EN] Understanding Client Fingerprinting: Bot Detection Evasion Using Fingerprint Multilayer Spoofing
Your automation script or pentest tool works perfectly in the lab. Requests flow, data returns. But the moment you hit the real target, the
[PT-BR] Understanding Client Fingerprinting: Bot Detection Evasion Using Fingerprint Multilayer Spoofing
Seu script de automação ou ferramenta de pentest funciona perfeitamente no laboratório. As requisições fluem, os dados retornam. Mas no momento em que você
CVE-2026-24061: Execução remota de código no Telnetd - análise técnica e prova de conceito
Em 20 de janeiro de 2026, foi identificada uma vulnerabilidade crítica de bypass de autenticação no serviço GNU telnetd, descoberta por Kyu Neushwaistein (Carlos
![[EN] A Deep Dive into KeyTabExtractor Techniques](https://hakaisecurity.io/wp-content/uploads/2026/01/Artigo-Lucas-e1768326771351.jpg)
[EN] A Deep Dive into KeyTabExtractor Techniques
By: Lucas Hoffmann Revision: Thiago Bispo & Allan Kardec Technical Introduction Many modern corporations rely on Kerberos, a widely used network authentication protocol designed
![[PT-BR] N8Naked: exploring security misconfigurations in N8N](https://hakaisecurity.io/wp-content/uploads/2025/12/n8n.png)
[PT-BR] N8Naked: exploring security misconfigurations in N8N
Por: Lucas William ,Lucas Hoffmann e Thiago Bispo Introdução No segundo semestre de 2025 o time de DevSec da Hakai atuou em uma incursão
[EN] N8Naked: exploring security misconfigurations in N8N
Por: Lucas William ,Lucas Hoffmann e Thiago Bispo Introduction In the second half of 2025, the Hakai DevSec team carried out an incursion into
Who Scans the Scanner? Exploiting Trend Micro Mobile Security
Abstract Trend Micro Mobile Security (TMMS) is widely deployed to protect Android fleets. This research shows how an attacker can subvert that trust. We