All Articles

NICER Protocol Deep Dive: Internet Exposure of Redis

CVE-2020-7378: OpenCRX Unverified Password Change (FIXED)

NICER Protocol Deep Dive: Internet Exposure of Microsoft SQL Server (MS SQL) (UDP/1434)

Metasploit Wrap-Up: 11/20/20

This One Time on a Pen Test: CSRF to Password Reset Phishing

Don’t Put It on the Internet: Tesla Backup Gateway Edition

Metasploit Wrap-Up: 11/13/20

NICER Protocol Deep Dive: Internet Exposure of MySQL

VMware ESXi OpenSLP Remote Code Execution Vulnerability (CVE-2020-3992 and CVE-2019-5544): What You Need To Know

Rapid7 Analysis: CVE-2020-3992 — ESXi OpenSLP remote code execution vulnerability

Rapid7 Intelligence

SaltStack Pre-Authenticated Remote Root (CVE-2020-16846 and CVE-2020-25592): What You Need to Know

Visualizing Network Traffic Data to Drive Action

Darragh Delaney

Rapid7 Analysis: CVE-2020-16846 — SaltStack Unauthenticated Shell Injection

Rapid7 Intelligence

Rapid7 Analysis: CVE-2020-25592 — SaltStack Authentication Bypass and Salt SSH Command Execution

Rapid7 Intelligence

Advance Your Career: Life as a Rapid7 Belfast Software Engineer

Metasploit Wrap-Up: Nov. 6, 2020

This One Time on a Pen Test: How I Hacked a Self-Driving Car

Jonathan Stines

Rapid7 Analysis: CVE-2020-14871

Rapid7 Intelligence

NICER Protocol Deep Dive: Internet Exposure of Citrix ADC/NetScaler

The Story Behind Security Breaches

Overview of Content Security Policies (CSPs) on the Web