Posts tagged Research

Threat Research
NICER Protocol Deep Dive: Internet Exposure of Microsoft SQL Server (MS SQL) (UDP/1434)
Tod Beardsley

Exposure Management
Behind the Scenes: Under the Hoodie 2020 Video Series
Bri Hand

Threat Research
Don’t Put It on the Internet: Tesla Backup Gateway Edition
Derek Abdine

Threat Research
NICER Protocol Deep Dive: Internet Exposure of MySQL
Tod Beardsley

Threat Research
Rapid7 Analysis: CVE-2020-3992 — ESXi OpenSLP remote code execution vulnerability
Rapid7 Labs

Threat Research
SaltStack Pre-Authenticated Remote Root (CVE-2020-16846 and CVE-2020-25592): What You Need to Know
boB Rudis

Threat Research
Rapid7 Analysis: CVE-2020-16846 — SaltStack Unauthenticated Shell Injection
Rapid7 Labs

Threat Research
Rapid7 Analysis: CVE-2020-25592 — SaltStack Authentication Bypass and Salt SSH Command Execution
Rapid7 Labs

Threat Research
This One Time on a Pen Test: How I Hacked a Self-Driving Car
Jonathan Stines

Threat Research
Rapid7 Analysis: CVE-2020-14871
Rapid7 Labs

Threat Research
NICER Protocol Deep Dive: Internet Exposure of Citrix ADC/NetScaler
Tod Beardsley

Exposure Management
The Story Behind Security Breaches
Laurel Marotta

Threat Research
Rapid7 Analysis: CVE-2020-17087 Windows Kernel local privilege escalation 0day
Rapid7 Labs

Threat Research
Rapid7 Analysis: CVE-2020-14882 — Unauthenticated RCE in Console component of Oracle WebLogic Server
Rapid7 Labs

Threat Research
NICER Protocol Deep Dive: Internet Exposure of Remote Desktop (RDP)
Tod Beardsley

Threat Research
Rapid7 Analysis: CVE-2020-15999 Chrome Freetype 0day
Rapid7 Labs

Threat Research
Rapid7 Analysis: CVE-2020-5135
Rapid7 Labs

Threat Research
Rapid7 Analysis: CVE-2020-16898 aka Bad Neighbor / Ping of Death Redux
Rapid7 Labs

Threat Research
Rapid7 Analysis: CVE-2020-16952 — Microsoft SharePoint Remote Code Execution Vulnerabilities
Rapid7 Labs

Vulnerabilities and Exploits
PSA: Increase in RDP Attacks Means It's Time to Mind Your RDPs and Qs
boB Rudis

Threat Research
This One Time on a Pen Test: Doing Well With XML
Tommy Dew