180 matches found
Attacking AWS Cognito with Pacu (p1)
The post Attacking AWS Cognito with Pacu p1 appeared first on Rhino Security Labs...
SSH Remains Most Targeted Service in Cado’s Cloud Threat Report
By Waqas Cado Security Labs' 2023 Cloud Threat Findings Report dives deep into the world of cybercrime, cyberattacks, and vulnerabilities. This is a post from HackRead.com Read the original post: SSH Remains Most Targeted Service in Cados Cloud Threat Report...
New QBot Banking Trojan Campaign Hijacks Business Emails to Spread Malware
A new QBot malware campaign is leveraging hijacked business correspondence to trick unsuspecting victims into installing the malware, new findings from Kaspersky reveal. The latest activity, which commenced on April 4, 2023, has primarily targeted users in Germany, Argentina, Italy, Algeria, Spai...
CloudGoat detection_evasion Scenario: Avoiding AWS Security Detection and Response
The post CloudGoat detectionevasion Scenario: Avoiding AWS Security Detection and Response appeared first on Rhino Security Labs...
CVE-2022-25237: Bonitasoft Authorization Bypass and RCE
The post CVE-2022-25237: Bonitasoft Authorization Bypass and RCE appeared first on Rhino Security Labs...
CloudGoat goes Serverless: A walkthrough of Vulnerable Lambda Functions
The post CloudGoat goes Serverless: A walkthrough of Vulnerable Lambda Functions appeared first on Rhino Security Labs...
CVE-2022-25372:Local Privilege Escalation in Pritunl VPN Client
The post CVE-2022-25372: Local Privilege Escalation in Pritunl VPN Client appeared first on Rhino Security Labs...
Grafana -- Directory Traversal
GitHub Security Labs reports: A vulnerability through which authenticated users could read out fully lowercase or fully uppercase .md files through directory traversal. Doing our own follow-up investigation we found a related vulnerability through which authenticated users could read out arbitrar...
Cloud Malware: Resource Injection in CloudFormation Templates
The post Cloud Malware: Resource Injection in CloudFormation Templates appeared first on Rhino Security Labs...
Dell OpenManage Server Administrator 9.4.0.0 - Arbitrary File Read
Exploit Title: Dell OpenManage Server Administrator 9.4.0.0 - Arbitrary File Read Date: 4/27/2020 Exploit Author: Rhino Security Labs Version: :' exit This XML to imitate a Dell OMSA remote system comes from https://www.exploit-db.com/exploits/39909 Also check out...
Downloading and Exploring AWS EBS Snapshots
The post Downloading and Exploring AWS EBS Snapshots appeared first on Rhino Security Labs...
German COVID-19 Contact-Tracing Vulnerability Allowed RCE
A security vulnerability in the infrastructure underlying Germany’s official COVID-19 contact-tracing app, called the Corona-Warn-App CWA, would have allowed pre-authenticated remote code execution RCE. Researcher Alvaro Muñoz wrote in a report this week that he and his team at GitHub Security La...
CloudGoat ECS_EFS_Attack Walkthrough
The post CloudGoat ECSEFSAttack Walkthrough appeared first on Rhino Security Labs...
APICheck - The DevSecOps Toolset For REST APIs
APICheck is a complete toolset designed and created for testing REST APIs. Why APICheck APICheck focuses not only in the security testing and hacking use cases. The goal of the project is to become a complete toolset for DevSecOps cycles. The tools are aimed to diverse users profiles: Developers...
Java Deserialization Exploitation With Customized Ysoserial Payloads
The post Java Deserialization Exploitation With Customized Ysoserial Payloads appeared first on Rhino Security Labs...
GKE Kubelet TLS Bootstrap Privilege Escalation
The post GKE Kubelet TLS Bootstrap Privilege Escalation appeared first on Rhino Security Labs...
Fuzzing Left4Dead 2 with CERT’s Basic Fuzzing Framework
The post Fuzzing Left4Dead 2 with CERT’s Basic Fuzzing Framework appeared first on Rhino Security Labs...
Buffer Overflow Leading toCode Execution in Left4Dead 2
The post Buffer Overflow Leading to Code Execution in Left4Dead 2 appeared first on Rhino Security Labs...