Tagged in

Tenable Research

Tenable TechBlog

Learn how Tenable finds new vulnerabilities and writes the software to help you find them

More information

Followers

1.8K

Elsewhere

More, on Medium

Tenable Research

Antoine Cauchois in Tenable TechBlog

Jul 31

Using conflicting objects in Active Directory to gain privileges

Why CNF objects may be more…

Joshua Martinelle in Tenable TechBlog

Jun 10

Solidus — Code Review

As a Research Engineer at Tenable, we have several periods during the year to work on a subject of our choice, as long…

Clément Notin [Tenable] in Tenable TechBlog

Jun 3

Stealthy Persistence with “Directory Synchronization Accounts” Role in Entra ID

“Directory…

Joshua Martinelle in Tenable TechBlog

May 29

WordPress : From vulnerability identification to compromising

Ben Smith in Tenable TechBlog

Apr 2

Another Path to Exploiting CVE-2024-1212 in Progress Kemp LoadMaster

Intro

Clément Notin [Tenable] in Tenable TechBlog

Jan 31

Stealthy Persistence & PrivEsc in Entra ID by using the Federated Auth Secondary Token-signing Cert.

Clément Notin [Tenable] in Tenable TechBlog

Jan 9

Entra Roles Allowing To Abuse Entra ID Federation for Persistence and Privilege Escalation

2 responses

Joshua Martinelle in Tenable TechBlog

Jan 2

WordPress MyCalendar Plugin — Unauthenticated SQL Injection(CVE-2023–6360)

Clément Notin [Tenable] in Tenable TechBlog

Jul 5, 2023

Code for Reading Windows Serialized Certificates

What are Windows “serialized certificates” found on…

Joshua Martinelle in Tenable TechBlog

Mar 7, 2023

WordPress BuddyForms Plugin — Unauthenticated Insecure Deserialization (CVE-2023–26326)