Sign inGet started
Penetration testing & window.opener — XSS vectors part 2

Penetration testing & window.opener — XSS vectors part 2

tldr; opener.location.* and the onhashchange event are XSS vectors. XSS exists in old versions of reveal.js.
Go to the profile of Josh Graham
Josh Graham
CTF Writeup — You Shall Not Pass

CTF Writeup — You Shall Not Pass

BSides Canberra 2019 — Reverse Engineering
Go to the profile of Tom
Tom
Under Cover of Darkness

Under Cover of Darkness

Practical considerations for (legally) breaking and entering.
Go to the profile of Tom
Tom
BloodHound.xpab — Applocker bypass

BloodHound.xpab — Applocker bypass

A few weeks ago I created a proof of concept XAML browser application (XBAP) that demonstrates Presentationhost.exe bypassing default…
Go to the profile of Josh Graham
Josh Graham
Cyberlympics 2018 — Finals

Cyberlympics 2018 — Finals

Wherein the team travels to Atlanta to open a padlock without touching it.
Go to the profile of Tom
Tom
Multiple Security Vulnerabilities in Dell EMC Avamar

Multiple Security Vulnerabilities in Dell EMC Avamar

In this post I’ll cover four different CVEs identified by myself and a colleague from TSS.
Go to the profile of Jarrod Farncomb
Jarrod Farncomb
Penetration testing & window.opener — XSS vectors part 1

Penetration testing & window.opener — XSS vectors part 1

This is the first part of a four part series discussing security concepts related to the JavaScript opener variable (almost all the…
Go to the profile of Josh Graham
Josh Graham
About TSS - Trusted Security ServicesLatest StoriesArchiveAbout MediumTermsPrivacy