Cyber Labs |Research, Vulnerability Disclosures & More| LRQA

How AWS EC2 backups can be exfiltrated

24 Oct 2019

As clients' interest in cloud infrastructure grows, so does the hackers'. In this post, we review common exfiltration...

How to Exfiltrate AWS EC2 Data

9 Oct 2019

As Cloud infrastructure has become common, it has also become common for penetration testers to find themselves attacking...

Maritime Malware Campaigns - Document Payloads

19 Sep 2019

As part of our research into threats facing the marine and offshore sector, we recently uncovered an ongoing malware...

DerbyCon 2019 CTF Write Up

18 Sep 2019

We recently returned from the always excellent DerbyCon 2019 conference. We once again competed in the 48 hour Capture The...

Cross Site Scripting (XSS) Payload Generator

29 Jul 2019

This post will help you to evade some of those tricky cross site scripting restrictions with the help...

CVE-2018-20319: Why you should always have two factor authentication...

19 Jun 2019

The OpenConnect VPN client, on all supported platforms, suffered from a possible information leak that could result in...

CVE-2019-7315: Genie Access WIP3BVAF IP Camera Directory Traversal

30 May 2019

We have discovered a directory traversal vulnerability that affects Genie Access’ WIP3BVAF WISH IP 3MP IR Auto Focus...

Operational Security with PoshC2 Framework

23 May 2019

This post describes a new capability that has been deployed within PoshC2, which is designed to assist with revealing...

CVE-2017-18019: Privilege Escalation via a Kernel Pointer Dereference

17 Apr 2019

A little while ago, I discovered a vulnerability, CVE-2017-18019, affecting a kernel driver of multiple K7 Computing security products, as well...

Introducing PoshC2 v4.8 - includes C# dropper, task management...

1 Apr 2019

We recently released version 4.8 of PoshC2, which includes a number of fixes and improvements that help facilitate simulated...

Tools

Tutorials

Blogs

Filter by

How AWS EC2 backups can be exfiltrated

How to Exfiltrate AWS EC2 Data

Maritime Malware Campaigns - Document Payloads

DerbyCon 2019 CTF Write Up

Cross Site Scripting (XSS) Payload Generator

CVE-2018-20319: Why you should always have two factor authentication...

CVE-2019-7315: Genie Access WIP3BVAF IP Camera Directory Traversal

Operational Security with PoshC2 Framework

CVE-2017-18019: Privilege Escalation via a Kernel Pointer Dereference

Introducing PoshC2 v4.8 - includes C# dropper, task management...

Error

No results found