Lateral Movement – RDP

The Remote Desktop Protocol RDP is widely used across internal networks by Administrators. This allows systems owners and admins to manage Windows environments remotely. However RDP can give various opportunities to an attacker to conduct attacks that can be used for lateral movement in red team...

VLC Media Player/Kodi/PopcornTime 'Red Chimera' < 2.2.5 - Memory Corruption (PoC)

""" VLC Media Player/Kodi/PopcornTime 'Red Chimera' 2.2.5 Memory Corruption PoC Author: SivertPL [email protected] CVE: CVE-2017-8311 Infamous VLC/Kodi/PopcornTime subtitle attack in libsubtitleplugin.dll. This is the Proof of Concept of the reverse engineered heap corruption vulnerability...

Loading Kernel Shellcode

In the wake of recent hacking tool dumps, the FLARE team saw a spike in malware samples detonating kernel shellcode. Although most samples can be analyzed statically, the FLARE team sometimes debugs these samples to confirm specific functionality. Debugging can be an efficient way to get around...

CVE-2017-1701

IBM Team Concert RTC 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, and 6.0.5 stores credentials for users using a weak encryption algorithm, which could allow an authenticated user to obtain highly sensitive information. IBM X-Force ID: 134393...

Code injection

IBM Team Concert RTC 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, and 6.0.5 stores credentials for users using a weak encryption algorithm, which could allow an authenticated user to obtain highly sensitive information. IBM X-Force ID: 134393...

CVE-2017-1701

IBM Team Concert RTC 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, and 6.0.5 stores credentials for users using a weak encryption algorithm, which could allow an authenticated user to obtain highly sensitive information. IBM X-Force ID: 134393...

CVE-2017-1701

Summary: CVE-2017-1701 affects IBM Rational Team Concert / RTC (IBM Engineering Workflow Management) versions 5.0–6.0.5. The root cause is the use of a weak encryption algorithm to store user credentials, enabling an authenticated user to obtain highly sensitive information. Impact: credential le...

CVE-2017-1701

IBM Team Concert RTC 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, and 6.0.5 stores credentials for users using a weak encryption algorithm, which could allow an authenticated user to obtain highly sensitive information. IBM X-Force ID: 134393...

Loading Kernel Shellcode

In the wake of recent hacking tool dumps, the FLARE team saw a spike in malware samples detonating kernel shellcode. Although most samples can be analyzed statically, the FLARE team sometimes debugs these samples to confirm specific functionality. Debugging can be an efficient way to get around...

RTA (Red Team Arsenal) - An Intelligent Scanner To Detect Security Vulnerabilities In Companies Layer 7 Assets

Red Team Arsenal is a web/network security scanner which has the capability to scan all company's online facing assets and provide an holistic security view of any security anomalies. It's a closely linked collections of security engines to conduct/simulate attacks and monitor public facing asset...

Apache Struts REST Plugin OGNL Expression Handling RCE

Remote command execution vulnerability in Apache Struts REST Plugin OGNL expression handling Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Apache Struts REST Plugin XStream RCE

Remote command execution vulnerability in Apache Struts REST plugin XStream XML request Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Apache Struts Dynamic Method Invocation Expression Handling RCE

Remote command execution vulnerability in Apache Struts Dynamic Method Invocation expression handling Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

imagemagick/encoder_heic_fuzzer: Heap-buffer-overflow in decoder_context::process_reference_picture_set

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5918050164408320 Project: imagemagick Fuzzer: aflimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...

List of Adversary Emulation Tools

PenTestIT RSS Feed Every once in a while, the security industry brings forth a new buzz word and introduces terminologies that sound über cool and generate lot's of interest. One such word going around now-a-days is automated "adversary emulation". Let's first understand what this really means...

IMM2 Web Service Stack Overflow - NL

Lenovo Security Advisory: LEN-19586 Potential Impact: Stack overflow leading to memory corruption Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2017-3774 Summary Description: A stack overflow vulnerability was discovered within the web administration service in the...

llvm/llvm-opt-fuzzer--x86_64-loop_vectorize: Heap-use-after-free in llvm::LoopVectorizationCostModel::setCostBasedWideningDecision

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5746655065276416 Project: llvm Fuzzer: libFuzzerllvmllvm-opt-fuzzer--x8664-loopvectorize Fuzz target binary: llvm-opt-fuzzer--x8664-loopvectorize Job Type: libfuzzerasanllvm Platform Id: linux Cra...

libtiff/tiff_read_rgba_fuzzer: Use-of-uninitialized-value in inflate

Detailed report: https://oss-fuzz.com/testcase?key=5273368258412544 Project: libtiff Fuzzer: libFuzzerlibtifftiffreadrgbafuzzer Fuzz target binary: tiffreadrgbafuzzer Job Type: libfuzzermsanlibtiff Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: inflate...

HackerOne: Invalid Phabricator API token revealed through error message when escalating a report

Summary While trying to create a phabricator task by escalating to phabricator, error message contains the API token as a part of the pop up. This is seen when a user tries to enter an invalid API token. Description It was seen that after setting up phabricator integration in a program, when tryi...

Eliminating Dwell Time with Cb Response and Red Canary

How Can I Efficiently Organize and Lead the People on My Team? Organizing your team to protect your environment with agility is a difficult task with all the varied skills and challenges related to traditional security operations center SOC structures. We asked our partners at Red Canary, who eve...