Google Cloud Platform (GCP)Bucket Enumeration and Privilege Escalation

The post Google Cloud Platform GCP Bucket Enumeration and Privilege Escalation appeared first on Rhino Security Labs...

Unauthenticated AWS Role Enumeration (IAM Revisited)

The post Unauthenticated AWS Role Enumeration IAM Revisited appeared first on Rhino Security Labs...

AWS IAM Privilege Escalation – Methods and Mitigation

The post AWS IAM Privilege Escalation – Methods and Mitigation appeared first on Rhino Security Labs...

Simplifying API Pentesting With Swagger Files

The post Simplifying API Pentesting With Swagger Files appeared first on Rhino Security Labs...

The AWS Exploitation Framework: Pacu

Pacu is an open source AWS exploitation framework, designed for offensive security testing against cloud environments. Created and maintained by Rhino Security Labs, Pacu allows penetration testers to exploit configuration flaws within an AWS account, using modules to easily expand its...

Cloud Breach: Compromising AWS IAM Credentials

The post Cloud Breach: Compromising AWS IAM Credentials appeared first on Rhino Security Labs...

AWS IAM Enumeration 2.0: Bypassing CloudTrail Logging

The post AWS IAM Enumeration 2.0: Bypassing CloudTrail Logging appeared first on Rhino Security Labs...

Using AWS Account ID’s for IAM User Enumeration

The post Using AWS Account ID's for IAM User Enumeration appeared first on Rhino Security Labs...

CloudGoat: The ‘Vulnerable-by-Design’ AWS Environment

The post CloudGoat: The ‘Vulnerable-by-Design’ AWS Environment appeared first on Rhino Security Labs...

SleuthQL: A SQL Injection Discovery Tool

The post SleuthQL: A SQL Injection Discovery Tool appeared first on Rhino Security Labs...

VMSA-2018-0013:VMware Workstation and Fusion updates address signature bypass and multiple denial-of-service vulnerabilities

VMSA-2018-0013 VMware Workstation and Fusion updates address signature bypass and multiple denial-of-service vulnerabilities VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2018-0013 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: VMware...

AWS Essentials: Top 5 Tests for Penetration Testing AWS

The post AWS Essentials: Top 5 Tests for Penetration Testing AWS appeared first on Rhino Security Labs...

XML External Entity Injection in Jive-n (CVE-2018-5758)

The post XML External Entity Injection in Jive-n CVE-2018-5758 appeared first on Rhino Security Labs...

XXE Zeroday Vulnerability in HP PPM

Intro: XXE Zeroday Vulnerability in HP PPM Researchers at Rhino Security Labs discovered an XXE vulnerability in the way HP Project and Portfolio Management Center HP PPM processed imported tickets. Specifically, an XML external entity injection vulnerability allows an attacker to exploit the...

Watch: Hackers take over Tesla Model X; control brakes and doors

By Waqas The hackers from Keen Security Labs, a part of Chinese Internet giant Tencent This is a post from HackRead.com Read the original post: Watch: Hackers take over Tesla Model X; control brakes and doors...

Unrar VMSF_DELTA Arbitrary Memory Write

VMSFDELTA filter in unrar allows arbitrary memory write It appears that the VMSFDELTA memory corruption that was reported to Sophos AV in 2012 and fixed there was actually inherited from upstream unrar. For unknown reasons, whoever fixed the bug did not report this to upstream unrar, and the bug...

Classic kernel vulnerabilities debugging notes bis-vulnerability warning-the black bar safety net

Foreword The last time I sent an article yourself in a classic kernel Vulnerability CVE-2 0 1 4-4 1 1 3 struggling experience, and some debugging details of the share summary after feel the harvest a lot, and later an accidental opportunity, I saw the Baidu security Labs issued an article that is...

Write a unable to uninstall the App – Device Manager vulnerability-vulnerability warning-the black bar safety net

Two days ago some friends found the phone has an app cannot be uninstalled, after known because the Device Manager to activate the LED, then go try to cancel, but the cancel the the moment the card machine. Repeatedly toss after, only to re-brush. Later he sent an article about the Device Manager...

Samy Kamkar's ProxyGambit Picks Up for Defunct ProxyHam

Without fail in the weeks leading up to Black Hat and DEF CON, there are inevitably talks that are either pulled by organizers, cancelled by presenters, or strong suggestions are made that the talks don’t happen. This year’s first casualty, Ben Caudill’s scheduled DEF CON demonstration of ProxyHa...

Hacking Air-Gapped Computers Using Heat

An air-gapped computer system isolated from the Internet and other computers that are connected to external networks believes to be the most secure computers on the planet -- Yeah?? You need to think again before calling them 'safe'. A group of Israeli security researchers at the Cyber Security...