AppLocker Bypass — presentationhost.exe

Presentationhost.exe appears on several AppLocker whitelist bypass lists (e.g. api0cradl…

By Joshua Graham (@JPG1nc)

tldr; If an application expands local entities but enforces a maximum entity size, set the initial entity to the empty string…

Cyberlympics 2018 — DNS covert channel

I was fortunate enough to participate in the Cyberlympics this year with the TSS CTF team…

Cyberlympics 2018

Earlier in August, the remaining TSS team members who weren’t representing in Vegas for DEF CON competed in the Global…

I had the chance to play Jonathan Bar Or’s BlueHat CTF this year. Because I didn’t know anyone, I asked to be allocated to a random team and was put together with some really smart guys and we ended up coming in third place :-)

By Tom Ravenscroft- Small batch artisanal hax0r and security specialist