Канал: SEC Consult

Workshop: Historically Grown Active Directory Environments

Workshop: Historically Grown Active Directory Environments

Reflected Cross-Site Scripting (XSS) in PTC Codebeamer

Reflected Cross-Site Scripting (XSS) in PTC Codebeamer

SAP Application Server for ABAP: Authentication Bypass and Remote Code Execution

SAP Application Server for ABAP: Authentication Bypass and Remote Code Execution

Databricks Init Script Vulnerability

Databricks Init Script Vulnerability

DNS Protocol Impersonation with Version Negotiation in QUIC

DNS Protocol Impersonation with Version Negotiation in QUIC

Unauthenticated remote root buffer overflow in Zyxel devices

Unauthenticated remote root buffer overflow in Zyxel devices

Zhuhai Suny Technologies vulnerability - Displaying arbitrary tag contents

Zhuhai Suny Technologies vulnerability - Displaying arbitrary tag contents

Zhuhai Suny Technologies vulnerability - Replay attack against ESL tags

Zhuhai Suny Technologies vulnerability - Replay attack against ESL tags

Zhuhai Suny Technologies vulnerability - Receiving arbitrary ESL-TECH messages

Zhuhai Suny Technologies vulnerability - Receiving arbitrary ESL-TECH messages

Genua GenuGate Firewall Authentication Bypass Vulnerability

Genua GenuGate Firewall Authentication Bypass Vulnerability

Top 5 of the simplest and most effective measures to prevent hacker attacks

Top 5 of the simplest and most effective measures to prevent hacker attacks

Trend Micro InterScan Web Security Virtual Appliance Multiple Vulnerabilities

Trend Micro InterScan Web Security Virtual Appliance Multiple Vulnerabilities

SEC Consult sucht eine/n Chief Information Security Officer (CISO)

SEC Consult sucht eine/n Chief Information Security Officer (CISO)

Authentication Bypass in eIDAS-Node (Proof of concept)

Authentication Bypass in eIDAS-Node (Proof of concept)

Authentication Bypass in Governikus Autent SDK discovered by SEC Consult Vulnerability Lab

Authentication Bypass in Governikus Autent SDK discovered by SEC Consult Vulnerability Lab

Finding security vulnerabilities with modern fuzzing techniques - Rene Freingruber (RuhrSec 2018)

Finding security vulnerabilities with modern fuzzing techniques - Rene Freingruber (RuhrSec 2018)

Authentication bypass in Oracle Access Manager (OAM) SSO solution

Authentication bypass in Oracle Access Manager (OAM) SSO solution

DeepSec 2017: EnCase Forensic Case Study (SEC Consult / Wolfgang Ettlinger)

DeepSec 2017: EnCase Forensic Case Study (SEC Consult / Wolfgang Ettlinger)

Hijacking of arbitrary miSafes Mi-Cam video baby monitors

Hijacking of arbitrary miSafes Mi-Cam video baby monitors

Remote control vulnerability of Vibratissimo Panty Buster smart sex toy

Remote control vulnerability of Vibratissimo Panty Buster smart sex toy

The Art of Fuzzing - Demo 4: WinAFL workflow to fuzz Mimikatz and Taint Analysis

The Art of Fuzzing - Demo 4: WinAFL workflow to fuzz Mimikatz and Taint Analysis

The Art of Fuzzing - Demo 10: In-memory Fuzzing HashCalc using DynamoRio

The Art of Fuzzing - Demo 10: In-memory Fuzzing HashCalc using DynamoRio

The Art of Fuzzing - Demo 3: LibFuzzer Demonstration

The Art of Fuzzing - Demo 3: LibFuzzer Demonstration

The Art of Fuzzing - Demo 7: How to detect when a PDF finished loading

The Art of Fuzzing - Demo 7: How to detect when a PDF finished loading

The Art of Fuzzing - Demo 9: In-memory Fuzzing HashCalc using WinAppDbg

The Art of Fuzzing - Demo 9: In-memory Fuzzing HashCalc using WinAppDbg

The Art of Fuzzing - Demo 12: Using PageHeap and ApplicationVerifier to find bugs in mimikatz

The Art of Fuzzing - Demo 12: Using PageHeap and ApplicationVerifier to find bugs in mimikatz

The Art of Fuzzing - Demo 2: AFL workflow with FFMPEG

The Art of Fuzzing - Demo 2: AFL workflow with FFMPEG

The Art of Fuzzing - Demo 1: Find flaws in CTF Chat binary

The Art of Fuzzing - Demo 1: Find flaws in CTF Chat binary

The Art of Fuzzing - Demo 6: Extract Coverage Information using DynamoRio

The Art of Fuzzing - Demo 6: Extract Coverage Information using DynamoRio

The Art of Fuzzing - Demo 5: Adobe Reader Breakpoint Instrumentation

The Art of Fuzzing - Demo 5: Adobe Reader Breakpoint Instrumentation

The Art of Fuzzing - Demo 8: How to find the in-memory fuzzing function (HashCalc)

The Art of Fuzzing - Demo 8: How to find the in-memory fuzzing function (HashCalc)

The Art of Fuzzing - Demo 11: Fuzzing the CTF chat binary with a custom fuzzer

The Art of Fuzzing - Demo 11: Fuzzing the CTF chat binary with a custom fuzzer

EnCase Forensic Imager buffer overflow vulnerability

EnCase Forensic Imager buffer overflow vulnerability

Microsoft OneDrive iOS APP URI schemes vulnerability

Microsoft OneDrive iOS APP URI schemes vulnerability

Command Injection in multiple Ubiquiti Networks products

Command Injection in multiple Ubiquiti Networks products

Kerio Control Exploit

Kerio Control Exploit

Microsoft EMET 5.0 Protection Bypass

Microsoft EMET 5.0 Protection Bypass

CyberTrap - The Missing Link

CyberTrap - The Missing Link

Remote Code Execution via CSRF in OpenVPN Access Server "Desktop Client"

Remote Code Execution via CSRF in OpenVPN Access Server "Desktop Client"

Missing Entity Authentication / Deactivation of Protection in AVG Remote Administration

Missing Entity Authentication / Deactivation of Protection in AVG Remote Administration

Authentication Bypass / Missing Authentication in AVG Remote Administration

Authentication Bypass / Missing Authentication in AVG Remote Administration

Authentication bypass (SSRF) in Plex Media Server

Authentication bypass (SSRF) in Plex Media Server

Local Buffer Overflow vulnerability in SAS for Windows (Statistical Analysis System)

Local Buffer Overflow vulnerability in SAS for Windows (Statistical Analysis System)

Activate SECURE for WordPress

Activate SECURE for WordPress

SECURE WordPress

SECURE WordPress

SEC Consult

SEC Consult