Research

Stealthy Persistence with “Directory Synchronization Accounts” Role in Entra ID

“Directory…

WordPress : From vulnerability identification to compromising

Another Path to Exploiting CVE-2024-1212 in Progress Kemp LoadMaster

Intro

Stealthy Persistence & PrivEsc in Entra ID by using the Federated Auth Secondary Token-signing Cert.

Entra Roles Allowing To Abuse Entra ID Federation for Persistence and Privilege Escalation

WordPress MyCalendar Plugin — Unauthenticated SQL Injection(CVE-2023–6360)

Code for Reading Windows Serialized Certificates

What are Windows “serialized certificates” found on…

WordPress BuddyForms Plugin — Unauthenticated Insecure Deserialization (CVE-2023–26326)

Multiples WordPress plugins CVE analysis

WordPress Core is the most popular web Content Management System (CMS). This free and…

Silo, or not silo, that is the question

Is putting most of the critical assets in a silo a good…

SMB “Access is denied” Caused by Anti-NTLM Relay Protection

Explanations of the “Microsoft network…

NETGEAR Router Network Misconfiguration

Last Minute Patch Thwarts Pwn2Own Entries

How to mimic Kerberos protocol transition using reflective RBCD

Wordpress 6.0.3 Patch Analysis

Summary

Decrypt Kerberos/NTLM “encrypted stub data” in Wireshark

Extracting Ghidra Decompiler Output with Python

Microsoft Azure Synapse Pwnalytics

Tenable has discovered a privilege escalation flaw that allows a…

Rooting Gryphon Routers via Shared VPN

🎵 This LAN is your LAN, this LAN is my LAN 🎵

Intro

New World’s Botting Problem

New World, Amazon’s latest entry into the gaming world, is a plagued by…