Security Blog
Cybersecurity research, vulnerability analysis, and practical security insights.
NotPetya Ransomware Analysis
Executive Summary On June 27, 2017, what initially appeared to be a variant of the Petya ransomware began spreading rapidly across networks worldwide. Dubbed "NotPetya" by researchers, this malware...
Directory Brute Forcing Using Curl and WC
Directory Brute Forcing with common tools: Finding non-linked resources is an important part of any assessment. If you’re working with a scope that limits tools you can install/use, or you want...
Checking For Ssl Vulnerabilities On The Command Line
While Nessus is a wonderful vulnerability scanner, sometimes it is too slow and resource heavy for individual issues. The following 2 equivalent scripts perform checks for the following SSL related...
String Encoding in the Shell for Obfuscation
Data encoding in the shell is a quick and reliable method to parse input in one type of format to format of another type. This could be done in order to determine how an application has converted...
Bash Web Requester
Bash Web RequesterScan URLs for a list of given regexps #!/usr/bin/env bash ################################################################ # Bash Web Requester # by Aung Khant,...
Bash Web Parameter Fuzzer
PenTester Scripting [[exploitation:bash_web_parameter_fuzzer]] You are here: start » exploitation...
SSL Tests - v2, weak ciphers, MD5, Renegotiation
SSL Tests - v2, weak ciphers, MD5, Renegotiation #!/usr/bin/env bash # Description: # Script to extract the most security relevant details from a # target SSL/TLS implementation by...
Technical Analysis of Unpacking CVE-2
Unpacking CVE-2, specifically CVE-2024-21338, reveals a critical elevation of privilege vulnerability impacting the Windows kernel. This flaw allows a local, authenticated attacker to gain...
How Technical Analysis of the SimpleHelp RMM Works and What You Should Patch
Technical Analysis of the SimpleHelp RMM This technical analysis of the SimpleHelp RMM focuses on CVE-2026-48558, a critical authentication bypass vulnerability impacting deployments configured with...
How Unpacking CVE-2 Works and What You Should Patch
Unpacking CVE-2026-1337: Remote Code Execution in Acme SecureGateway Unpacking CVE-2026-1337 reveals a critical unauthenticated Remote Code Execution (RCE) vulnerability affecting Acme SecureGateway....
Unpacking CVE-2026 — Impact, Detection, and Remediation
Unpacking CVE-2026 CVE-2026-4201 exposes Apache Struts applications to remote code execution (RCE). This critical vulnerability stems from improper input validation within the Struts...
How Analyzing CVE-2024 Works and What You Should Patch
Analyzing CVE-2024-3094: The XZ Utils Backdoor Analyzing CVE-2024-3094 reveals a critical supply chain compromise impacting XZ Utils. This vulnerability is a backdoor intentionally inserted into...