Security Vulnerability

Web Application Penetration Testing​

Real-world web app testing to uncover logic flaws, access gaps, and hidden risks.

scrying

A tool for collecting and analyzing screenshots from remote desktop protocols, web applications, and VNC connections.

Entropy Source Evaluation

Using high-quality entropy sources for CSPRNG seeding is crucial for security.

Docker Layer 2 ICC Bug

A Docker security vulnerability where disabling inter-container communication (ICC) fails to block raw ethernet frames, allowing unexpected data transfer between containers via raw sockets.

Sabotage: Code added to popular NPM package wiped files in Russia and Belarus

A developer added malicious code to a popular open-source package, wiping files on computers in Russia and Belarus as a protest.

Phylum

Identifies 137 malicious npm packages and gathers system information to a remote server.

h2csmuggler

A tool for exploiting HTTP/2 cleartext smuggling vulnerabilities

Reverse Engineering HID iClass Master Keys

Exploiting a vulnerability in HID iClass system to retrieve master authentication key for cloning cards and changing reader settings.