Blog

20 October 2020

VNSee

Want to harvest valuable credentials, maybe even install a backdoor? See how RealVNC server can be abused to use a low value asset to harvest high value credentials.

10 minute read 20 October 2020 |

26 September 2019

All Your Cloud Are Belong To Us (CVE-2019-12491)

From incident response to uncovering a multi-cloud compromising vulnerability - read about our serendipitous journey!

20 minute read 26 September 2019 |

18 July 2019

Cylance, I Kill You!

Read about our Journey of dissecting the brain of a leading AI based Endpoint Protection Product, culminating in the creation of a universal bypass

25 minute read 18 July 2019 |

12 May 2019

Ethereum Smart Contracts Exploitation Using Right-To-Left-Override Character

We demonstrate how Right-To-Left-Override tricks can be applied to deceive users and auditors of smart contracts, and discuss mitigation techniques.

15 minute read 12 May 2019 |

28 March 2019

Unleash The Hash

Get the [almost] full list of MAC addresses that were targeted in the ASUS breach, and share our pain in the short story of extracting them.

20 minute read 28 March 2019 |