Collaborate Disseminate
Scope: Anydesk, TeamViewer, and their competitors.
Threat actors most of the time use the free version of these products since it would be a hassle to pay for the enterprise version every time.
Are you aware of any of these products having… Continue reading Is there a way to differentiate Remote Access tool infrastructures between paid and non paid? [closed]
Our desktop support team grants everyone an account for daily activities in the company, and also grands a local administrator account for specific people (mostly developers) so they can install software by themselves without having to req… Continue reading Windows log : identify difference between desktop login and UAC login [migrated]
First of all I would like to state that my question occurs in a context of EU laws and EU citizen.
I found a vulnerability in a product distributed in a few companies of EU countries. This vulnerability allows an attacker with a foothold i… Continue reading Legal obligations of a company in case of RGPD-related vulnerability [migrated]
When using a proper VPN to access a remote server, the server should not be able to resolve your country of origin using your IP address because the IP provided in the request will be the one of the proxy.
Now let’s talk abo… Continue reading Could a desktop application disclose location even if a VPN is used?
We are currently working on a ZAP (Zed Attack Proxy) add-on designed to facilitate the pentesting of our new framework.
Our solution is using OData so we were wondering if their was existing tools that we could have integrat… Continue reading Integrate OData pentesting tool to ZAP add-on
I am asked to integrate the code audit tool HP Fortify in our development process, but the main constraint about it is that the whole code should not be scanned every time: only the classes impacted by the last backlog item s… Continue reading HP Fortify scan automation