Cyber Labs - Blogs

VM Detection Tricks, Part 3: Hyper-V RAW Network Protocol

7 Apr 2021

This month’s virtual machine detection trick involves detecting the presence of the Hyper-V RAW network protocol. This protocol...

VM Detection Tricks, Part 2: Driver Thread Fingerprinting

12 Mar 2021

This year we’re documenting a series of new and as-yet undocumented VM detection tricks. These detection tricks will...

CVE-2020-24550: Open Redirect in Episerver Find

11 Feb 2021

During the course of our work, we discovered an open redirect vulnerability in Episerver Find. This has...

Introducing FComm - C2 Lateral Movement

27 Jan 2021

Over the past few years, we have found a few edge cases where the traditional lateral movement communication...

VM Detection Tricks, Part 1: Physical memory resource maps

20 Jan 2021

In this series we’ll document a novel and as-yet-undocumented Virtual Machine detection trick for each month of 2021....

PoshC2 Improved HTML Reports

6 Jan 2021

Red team operators need detailed and accurate C2 report output in order to conduct high quality work. Consequently,...

CVE-2020-14418: madCodeHook Library Local Privilege Escalation

1 Dec 2020

Nettitude discovered a vulnerability in the ‘madCodeHook’ third party library which caused a number of security products, including...

CVE-2020-27708: Electronic Arts (EA) Origin - Local Privilege Escalation

3 Nov 2020

We recently assessed the security posture of Electronic Arts Origin Client and discovered a privilege escalation issue that...

Introducing PoshC2 v7.0

20 Aug 2020

There have been some big improvements and new features added to PoshC2 and we’re excited to announce the...

Detecting PoshC2 - Indicators of Compromise

17 Jun 2020

As a counterpart to the release of PoshC2 version 6.0 we are providing a list of some of...

Filter by

VM Detection Tricks, Part 3: Hyper-V RAW Network Protocol

VM Detection Tricks, Part 2: Driver Thread Fingerprinting

CVE-2020-24550: Open Redirect in Episerver Find

Introducing FComm - C2 Lateral Movement

VM Detection Tricks, Part 1: Physical memory resource maps

PoshC2 Improved HTML Reports

CVE-2020-14418: madCodeHook Library Local Privilege Escalation

CVE-2020-27708: Electronic Arts (EA) Origin - Local Privilege Escalation

Introducing PoshC2 v7.0

Detecting PoshC2 - Indicators of Compromise

Error

No results found