By Scott Court Today I am writing about how I accidentally discovered CVE-2017-17087. This is a security vulnerability in Vim…
Internals of CatTails: A C2/Bot Framework
By Simon Buchheit Overview: CatTails at its core is a raw socket library that allows a user to create…
Bluekeep (RDP) Vulnerability
By Nick Lim Introduction In May of 2017, the WannaCry ransomware attack hit companies around the world causing mass chaos…
DNS Rebinding, AKA How I Learned to Start Worrying and Hate DNS
By Joshua Niemann Web applications have come a long way from their original inception. In today’s modern web landscape,…
Apache2: Keep-alive vs. Concurrent Connections
By Brett Segraves Introduction In the world of the web there are multiple methods of connecting to a web…
Exploiting SMB/NetBIOS on Windows 95/98
By Conrad Schneggenburger Ahh. Windows 9x Upon first starting a virtual machine of Windows 98, vivid memories began flooding…
Using Meraki’s WebHooks with Lambda
By Chaim Sanders If you follow Meraki’s constant barrage of emails, you’ll know that they’ve added support for webhooks. Upon…
TravisCI with multiple concurrent Docker images
By Chaim Sanders The Problem At the OWASP Core Rule Set project (CRS) , we recently wanted to expand our…
Wemo Smart Plug Security Audit
By Evan Craska With the advancement of modern technology, the world is getting much “smarter.” The Internet of Things has…
Tricking AI with AI
By Caitlin Lander My entire day is dictated by the personal assistant on my phone. In fact I rely on…
