White Papers
Decentralised Applications and Blockchain Security
Introduction With the advent of Web3 and blockchain technology, decentralised applications (DApp) have risen in …
BIG-IP Remote Code Execution Vulnerability
The Vulnerability For F5’s iControl REST services, a user automatically gets access to REST resources but will need to …
Policykit Exploitation
Introduction A Linux component called PolicyKit (also known as Polkit) is a component used in many Unix-based operating …
Supply Chain Attacks: A WordPress Case Study
Supply chain attacks have gained massively increasing attention recently, with the hugely notable cases of SolarWinds in …
MouseJacking
Introduction With advances in wireless technologies, it’s becoming common to incorporate wireless technologies into …
Password Cracking
BackStory For in-person infrastructure/network testing, it’s not feasible to carry around large power-hungry GPU …
Dirty Pipe (CVE-2022-0847)
Introduction ‘Dirty Pipe’ is a vulnerability and exploit, discovered by Max Kellermen, that allows for local privilege …
Uber / Rockstar Hack
What We Know In the third quarter of 2022, information indicating potential data breaches at both Uber and Rockstar …
ProxyNotShell in a NutShell
Introduction ProxyNotShell is composed of two CVEs, which allow for authenticated remote code execution in Microsoft …