Curated security research, vulnerabilities, advisories and tools for practitioners.

netspi.com

Security coverage collected from netspi.com. (Page 15)

421.

Gaining AWS Console Access via API Keys

blog | 2020-03-18 00:00 | netspi.com | original ↗ | #cloud | #cloud-security | #aws

422.

Innovation and Consistency: The Right and Left Brain of Vulnerability Management

blog | 2020-03-17 00:00 | netspi.com | original ↗ | #vulnerability-management | #automation | #pentest

423.

RSA 2020: Three Takeaways from the Halls of the Moscone Center

blog | 2020-03-04 00:00 | netspi.com | original ↗ | #threat-intelligence | #cyber-resilience | #ciso

424.

Azure Privilege Escalation Using Managed Identities

vulnerability | 2020-02-20 00:00 | netspi.com | original ↗ | #cloud | #cloud-security | #privilege-escalation

425.

Adaptive DLL Hijacking

blog | 2020-02-19 00:00 | netspi.com | original ↗ | #windows | #red-team | #dll-hijacking

426.

Why Do People Confuse “End-to-End Encryption” with “Security”?

blog | 2020-02-18 00:00 | netspi.com | original ↗ | #malware | #whatsapp | #phishing

427.

Attacking Azure with Custom Script Extensions

blog | 2020-02-13 00:00 | netspi.com | original ↗ | #cloud | #cloud-security | #privilege-escalation

428.

Keep Pace with Evolving Attack Surfaces: Penetration Testing as a Service

blog | 2020-02-04 00:00 | netspi.com | original ↗ | #vulnerability-management | #continuous-testing | #ptaas

429.

Three Things To Remember When Building Your InfoSec Program

blog | 2020-01-14 00:00 | netspi.com | original ↗ | #risk-management | #communication | #strategy

430.

Azure Privilege Escalation via Cloud Shell

vulnerability | 2019-12-10 00:00 | netspi.com | original ↗ | #cloud | #cloud-security | #privilege-escalation

431.

Six Ways to Increase the Business Relevance of Risk-Based Reporting

blog | 2019-12-11 00:00 | netspi.com | original ↗ | #vulnerability-management | #communication | #metrics

432.

Your Cloud Assets are Probably Not as Secure as You Think They Are

blog | 2019-11-25 00:00 | netspi.com | original ↗ | #cloud | #cloud-security | #aws

433.

Analyzing DNS TXT Records to Fingerprint Online Service Providers

blog | 2019-11-18 00:00 | netspi.com | original ↗ | #attack-surface | #osint | #powershell

434.

Exploiting SQL Server Global Temporary Table Race Conditions

blog | 2019-11-11 00:00 | netspi.com | original ↗ | #privilege-escalation | #pentest | #database

435.

Leading Financial Institution Leveraged NetSPI Red Team Service to Improve Their Security Posture

blog | 2019-11-01 00:00 | netspi.com | original ↗ | #osint | #red-team | #social-engineering

436.

Limiting The Exposure of Plain Text Passwords in C#

blog | 2019-10-24 00:00 | netspi.com | original ↗ | #pentesting | #secure-coding | #thick-client

437.

CVE-2019-10617 – AtherosSvc Registry LPE

vulnerability | 2019-10-09 00:00 | CVE-2019-10617 | netspi.com | original ↗ | #windows | #lpe | #reverse-engineering

438.

Maintaining Azure Persistence via Automation Accounts

blog | 2019-09-12 00:00 | netspi.com | original ↗ | #cloud | #cloud-security | #red-team

439.

MachineAccountQuota Transitive Quota: 110 Accounts and Beyond

blog | 2019-08-29 00:00 | netspi.com | original ↗ | #active-directory | #windows | #msrc

440.

Collecting Contacts from zoominfo.com

blog | 2019-07-09 00:00 | netspi.com | original ↗ | #automation | #osint | #reconnaissance

441.

Modern Red Team Infrastructure

blog | 2019-06-13 00:00 | netspi.com | original ↗ | #red-team | #c2 | #infrastructure

442.

Re-Animating ActivitySurrogateSelector

blog | 2019-06-04 00:00 | netspi.com | original ↗ | #deserialization | #red-team | #dotnet

443.

Using Azure Automation Accounts to Access Key Vaults

blog | 2019-03-20 00:00 | netspi.com | original ↗ | #cloud | #secrets | #privilege-escalation

444.

MachineAccountQuota is USEFUL Sometimes: Exploiting One of Active Directory's Oddest Settings

blog | 2019-03-06 00:00 | netspi.com | original ↗ | #active-directory | #privilege-escalation | #kerberos

445.

Get-AzurePasswords: Exporting Azure RunAs Certificates for Persistence

blog | 2019-02-27 00:00 | netspi.com | original ↗ | #cloud | #automation | #azure

446.

Make it Easy on the Development Team

blog | 2019-01-04 00:00 | netspi.com | original ↗ | #appsec | #devsecops | #security-testing

447.

ADIDNS Revisited – WPAD, GQBL, and More

blog | 2018-12-05 00:00 | netspi.com | original ↗ | #active-directory | #dns | #mitm

448.

Escape NodeJS Sandboxes

blog | 2018-11-27 00:00 | netspi.com | original ↗ | #sandbox-escape | #reverse-shell | #javascript

449.

Five Signs Your Application Security Assessment Process Needs a Reboot

blog | 2018-11-16 00:00 | netspi.com | original ↗ | #appsec | #vulnerability-management | #automation

450.

Machine Learning for Red Teams, Part 1

blog | 2018-11-14 00:00 | netspi.com | original ↗ | #ai-security | #red-team | #machine-learning

← Previous More →