Security Research

Open Source Intelligence (OSINT) is a sub-type of threat intelligence that is only gathered from free, public sources. In this article, we will tackling a challenge, and see how OSINT can be used in various situations by different actors to support intelligence needs This is a TryHackMe room that is…

By Luli Rosenberg An acquaintance of mine sent me this photo of her last trip to Israel. Can you figure out where she was in this photo? Couldn’t you solve it? Then this article is definitely for you. Follow me, and until the end, I hope to help you decipher…

Our first Capture The Flag event recently came to an end. It was a great success! Beginning May 1st and continuing until May 10th, in total we received 11 submissions that qualified for the challenge. …

Hello guys welcome to my first Blog post. I recently started learning about the concept of IAT-Hooking and I got a idea to bypass it, so I wanted to try it out. …

Around 6 months ago I spent a few weeks reviewing Gitlab — I was particularly interested in how their Continuous Integration/Continuous Delivery (CI/CD) systems work. If you’re not familiar with the term, here’s a high level summary from RedHat: Continuous integration (CI) and continuous delivery (CD) embody a culture, set…

Sometimes XSS flaws are met with shrugs. They’re an incredibly common vulnerability in web applications even today with so many mitigations available. The perception that they’re somehow boring, or not a big deal, is influenced in part by the vast quantity of low-impact reports. Frequently a user has to be…

This is the first of three reports describing my findings from a review I did of Gitlab around 6 months ago. I thought I’d start with the simplest and the least impactful of them. Whilst this isn’t a high severity vulnerability, brute forcing credentials is a typical and low cost…

Introduction Continuing with the same idea as my last two articles about “F-Secure FSDIAG” and “CyberGhost VPN”, let’s continue our search for LOLBINs in known products. This time I’m taking a look at 360 Total Security Note: This issue has been reported to the 360 Total Security team but no response…

Introduction In the same spirit as my last article about “F-Secure FSDIAG”, let’s continue our search for LOLBINs in known products. This time I’m taking a look at CyberGhost VPN Note: Since the CyberGhost team doesn’t have a vulnerability program, I’ve reported this issue to the support team which they forwarded…