Collaborate Disseminate
Introduction I recently engaged in an investigation involving two new Carbanak campaigns targeting the hospitality sector. In each campaign a malicious Word or RTF document was sent to specific employees, claiming the sender had trouble with the online… Continue reading Carbanak Continues To Evolve: Quietly Creeping into Remote Hosts
Introduction I recently engaged in an investigation involving two new Carbanak campaigns targeting the hospitality sector. In each campaign a malicious Word or RTF document was sent to specific employees, claiming the sender had trouble with the online… Continue reading Carbanak Continues To Evolve: Quietly Creeping into Remote Hosts
Last year I decided to do some security research on an antivirus product. Avast seemed a good target since it is among most popular AV products used by home users and, as an added bonus, there is a bug bounty…
Continue reading Multiple Vulnerabilities in Avast Antivirus
April Patch Tuesday is here and, like the change of the seasons, this release comes with changes in how Microsoft presents these updates. Gone are the days of the Security Bulletins and instead Microsoft is taking a more CVE focused…
Continue reading Microsoft Patch Tuesday, April 2017
One of the most common and largely overlooked vulnerabilities by web developers is Open Redirect (also known as “Unvalidated Redirects and Forwards”). A website is vulnerable to Open Redirect when parameter values (the portion of URL after “?”) in an…
Continue reading Understanding and Discovering Open Redirect Vulnerabilities
We have just released CorSigs version 4.47 for Trustwave Web Application Firewall (WAF) versions 7.0 and 8.0. These rules’ purpose is to detect attack sequences or classes of attacks on a web application and its components. Release Summary WordPress RE… Continue reading Trustwave Web Application Firewall Signature Update 4.47 Now Available
In the previous posts, Steganography… what is that? and Steganalysis, the Counterpart of Steganography, I gave a quick introduction about what steganography and steganalysis are. I know it was full of mathematical terms so now it is time to explain…
Continue reading And Then? Where is the Risk with Steganography?
In the realm of malware, ransomware has been king for the last few years, compromising unsecured hosts and kindly requesting payment from their rightful owners. Back in January 2017, an attacker extended the concept to MongoDB and was hitting unsecured… Continue reading Protecting Yourself from MongoDB Ransomware
I was recently working on an external network penetration test where I identified a new vulnerability in a file sharing web application called Serv-U by SolarWinds. This vulnerability granted me administrative privileges to the Serv-U application, and,… Continue reading Exploiting Privilege Escalation in Serv-U by SolarWinds
Introduction During a recent incident response case, we were tasked with discovering the point of entry for an attacker that had compromised the entire Windows network. Among other things we uncovered evidence of web application attacks targeting the c… Continue reading Authentication and Encryption in PAS Web Shell Variant