If you have an F5, it’s time to patch! Thanks Michele for the link to today’s crop of F5 CVE’s, which include an unauthenticated RCE against the API, and another RCE against “hidden” config pages! https://support.f5.com/csp/article/K02566623, (Wed, Mar 10th)

=============== Rob VandenBrink coherentsecurity.com

Continue reading If you have an F5, it’s time to patch! Thanks Michele for the link to today’s crop of F5 CVE’s, which include an unauthenticated RCE against the API, and another RCE against “hidden” config pages! https://support.f5.com/csp/article/K02566623, (Wed, Mar 10th)→

Posted in Uncategorized

SharpRDP – PSExec without PSExec, PSRemoting without PowerShell, (Wed, Mar 10th)

With the amount of remediation folks have these days to catch malicious execution of powershell or the use of tools like psexec, red teams have to be asking themselves – what approach is next for lateral movement after you get that first foothold?

Continue reading SharpRDP – PSExec without PSExec, PSRemoting without PowerShell, (Wed, Mar 10th)→

Posted in Uncategorized