Curated security research, vulnerabilities, advisories and tools for practitioners.

netspi.com

Security coverage collected from netspi.com. (Page 18)

511.

Getting Started with WMI Weaponization – Part 3

blog | 2017-04-11 00:00 | netspi.com | original ↗ | #windows | #wmi | #post-exploitation

512.

Getting Started with WMI Weaponization – Part 1

blog | 2017-04-04 00:00 | netspi.com | original ↗ | #windows | #wmi | #weaponization

513.

Getting Started with WMI Weaponization – Part 2

blog | 2017-04-04 00:00 | netspi.com | original ↗ | #windows | #powershell | #wmi

514.

SQL Server Link Crawling with PowerUpSQL

blog | 2017-03-14 00:00 | netspi.com | original ↗ | #privilege-escalation | #lateral-movement | #database-security

515.

Attacking SSO: Common SAML Vulnerabilities and Ways to Find Them

blog | 2017-03-07 00:00 | netspi.com | original ↗ | #authentication | #sso | #xml

516.

Cisco ASA Remote Code Execution – Verifying CVE-2016-1287

vulnerability | 2017-02-28 00:00 | CVE-2016-1287 | netspi.com | original ↗ | #rce | #network-pentesting | #cisco-asa

517.

Defeating CSRF Protections Through Expired cross-domain.xml Domains

blog | 2017-02-21 00:00 | netspi.com | original ↗ | #csrf | #flash | #web-pentesting

518.

Attacking JavaScript Web Service Proxies with Burp

blog | 2017-02-14 00:00 | netspi.com | original ↗ | #javascript | #json | #web-pentesting

519.

Username Discovery

blog | 2017-01-30 00:00 | netspi.com | original ↗ | #reconnaissance | #authentication | #password-reset

520.

Login Portal Security 101

blog | 2017-01-23 00:00 | netspi.com | original ↗ | #attack-surface | #authentication | #web-pentesting

521.

Common Red Team Techniques vs Blue Team Controls Infographic

blog | 2016-10-11 00:00 | netspi.com | original ↗ | #phishing | #red-team | #blue-team

522.

Establishing Registry Persistence via SQL Server with PowerUpSQL

blog | 2016-08-05 00:00 | netspi.com | original ↗ | #windows | #red-team | #registry

523.

Get Windows Auto Login Passwords via SQL Server with PowerUpSQL

blog | 2016-08-04 00:00 | netspi.com | original ↗ | #pentesting | #windows | #registry

524.

Finding Sensitive Data on Domain SQL Servers using PowerUpSQL

blog | 2016-08-02 00:00 | netspi.com | original ↗ | #pentesting | #active-directory | #sensitive-data

525.

Finding Weak Passwords for Domain SQL Servers on Scale using PowerUpSQL

blog | 2016-08-02 00:00 | netspi.com | original ↗ | #active-directory | #privilege-escalation | #auditing

526.

Blindly Discover SQL Server Instances with PowerUpSQL

blog | 2016-08-01 00:00 | netspi.com | original ↗ | #active-directory | #powershell | #enumeration

527.

Attacking Federated Skype for Business with PowerShell

blog | 2016-07-21 00:00 | netspi.com | original ↗ | #osint | #information-disclosure | #phishing

528.

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

tool | 2016-07-15 00:00 | netspi.com | original ↗ | #privilege-escalation | #powershell | #toolkit

529.

Using PowerShell to Identify Federated Domains

blog | 2016-05-03 00:00 | netspi.com | original ↗ | #powershell | #enumeration | #saml

530.

Adding Web Content Filter Exceptions for Phishing Success

blog | 2016-04-26 00:00 | netspi.com | original ↗ | #phishing | #red-team | #social-engineering

531.

Maintaining Persistence via SQL Server – Part 2: Triggers

blog | 2016-04-11 00:00 | netspi.com | original ↗ | #red-team | #detection | #triggers

532.

Tinder Flaw: Location-Based Application Payment Logic Bypass

blog | 2016-04-04 00:00 | netspi.com | original ↗ | #mobile-security | #logic-flaw | #tinder

533.

Open Source Software – Is It the Death of Your Company?

blog | 2016-03-28 00:00 | netspi.com | original ↗ | #supply-chain | #vulnerability-management | #open-source

534.

Dumping Memory on iOS 8

blog | 2016-03-14 00:00 | netspi.com | original ↗ | #mobile-security | #ios | #jailbreak

535.

Maintaining Persistence via SQL Server – Part 1: Startup Stored Procedures

blog | 2016-03-07 00:00 | netspi.com | original ↗ | #red-team | #detection | #persistence

536.

Java Deserialization Attacks with Burp

blog | 2016-03-02 00:00 | netspi.com | original ↗ | #burp-extension | #web-pentesting | #java-deserialization

537.

Directory Traversal, File Inclusion, and The Proc File System

blog | 2016-02-23 00:00 | netspi.com | original ↗ | #linux | #reconnaissance | #directory-traversal

538.

Throwback Thursday – A Guide to Configuring Throwback

blog | 2016-01-27 00:00 | netspi.com | original ↗ | #red-team | #c2 | #backdoor

539.

NetSPI’s Top Password Masks for 2015

blog | 2016-01-19 00:00 | netspi.com | original ↗ | #pentesting | #ntlm | #password-cracking

540.

Building an Application Security Program from Scratch: Part 1

blog | 2016-01-12 00:00 | netspi.com | original ↗ | #appsec | #policy | #security-program

← Previous More →