Does Your New Camera Come with a Backdoor?
We tested an off-the-shelf camera for vulnerabilities and saw how little it takes to plant a backdoor ourselves.
Posts tagged
Research
The Blind Spot Of 802.1X Network Access Control (NAC)
Thanks to SpectrePi, a physical device on the network, an attacker can bypass the 802.1X NAC. This attack vector is of particular interest to organisations that operate devices ...
Plaintext in Memory: Revisiting Browser Password Security
This blog post shows how browsers expose passwords in memory and how they can potentially be extracted.
Threadless Ops II – Enhanced Evasion
In Threadless Ops II, we combine threadless injection with evasion techniques to bypass EDR heuristics. Using Crystal Palace lets us modularly integrate tradecraft (call stack ...
Threadless Ops - Enhanced Shellcoding for Threadless Injections
Process Injection is essential in red teaming and serves various strategic objectives, enabling attackers to expand their capabilities.
Penetration Testing For AI Applications
An insight into the rapidly expanding field of testing AI applications for vulnerabilities from a penetration tester's perspective.
Overload Mapping vs. Memory Scanners
Investigations and further thoughts on in-memory execution and detection.