PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

LDAP - Entender Para Atacar

yokai.hakaisecurity.io | research | #vulnerability-research | #ldap | #insights
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Quando realizamos testes internos, é comum o uso do LDAP (Lightweight Directory Access Protocol), mas pouco se entende sobre sua real função, utilidade e o quão poderoso esse protocolo pode ser. E como nosso lema é: “Entenda para atacar”, vamos explorar o que é o LDAP, sua origem, a versão anterior, suas nuances e muito […]
Published
Collected

Related coverage

research · yokai.hakaisecurity.io
LDAP - Know To Attack
When performing internal tests, it’s common to use LDAP (Lightweight Directory Access Protocol), but its true purpose, utility, and power are often misunderstood. And since our motto is “Understand before you attack,” we’ll explore what LDAP is, its origins, the earlier version, its nuances, and much more. What are DAP and LDAP? DAP (Directory Access […]
research · yokai.hakaisecurity.io
Beerus Framework – Um Novo Framework Mobile Surge
Abstract O Beerus Framework é uma ferramenta ofensiva mobile desenvolvida para facilitar todo o processo de pentest em dispositivos Android. Com uma interface unificada diretamente no dispositivo, o Beerus permite realizar desde a instrumentação de aplicações de forma built-in no dispositivo com Frida Core, exfiltração de dados do sandbox, memory dumping, proxying, controle de módulos […]
research · yokai.hakaisecurity.io
Beerus Framework – A New Mobile Framework Arises
Abstract The Beerus Framework is an offensive mobile tool developed to simplify the entire pentesting process on Android devices. With a unified interface directly on the device, Beerus allows performing tasks ranging from application instrumentation in a built-in way on the device with Frida Core, sandbox data exfiltration, memory dumping, proxying, Magisk module control, property […]
research · yokai.hakaisecurity.io
Defenda sua casa: modelagem de ameaças no mundo real – parte 2 de 3
Aprenda como modelar ameaças em uma aplicação na prática e conheça os requisitos de segurança para evitar vulnerabilidades.
research · yokai.hakaisecurity.io
Defend your home: Real-world Threat Modeling – Part 2 of 3
Introduction In the first blog post about threat modeling we focused our efforts on the theoretical basis, addressing the development and different methodologies. Now, in this second part of the article on threat modeling, we will demonstrate in a practical way how to model threats in an application, as well as the security requirements to […]
research · yokai.hakaisecurity.io
AI and Voice Deepfakes: How Did We Created One?
The blog post showcases the process of creating a deepfake using the voice of our founder, Oliveira Lima, during an internal presentation.
Back