Research

Extracting Firmware from Microcontrollers' Onboard Flash Memory, Part 3: Microchip PIC Microcontrollers

Extracting Firmware from Microcontrollers' Onboard Flash Memory, Part 2: Nordic RF Microcontrollers

Extracting Firmware from Microcontrollers' Onboard Flash Memory, Part 1: Atmel Microcontrollers

Confluence Unauthorized RCE Vulnerability (CVE-2019-3396): What You Need to Know

Apache HTTP Server Privilege Escalation (CVE-2019-0211): What You Need to Know

A Serial Problem: Exploitation and Exposure of Java Serialized Objects

Buy One Device, Get Data Free: Private Information Remains on Donated Tech

Cisco® RV110/RV130/RV215 Unauthenticated Configuration Export Vulnerability (CVE-2019-1663): What You Need to Know

Drupal Core Remote Code Execution (CVE-2019-6340): What You Need to Know

[IoT Security] Introduction to Embedded Hardware Hacking

Level Up Your Internet Intelligence Using the Rapid7 Open Data API and R

Understanding Ubiquiti Discovery Service Exposures

Cisco RV320/RV325 Router Unauthenticated Configuration Export Vulnerability (CVE-2019-1653): What You Need to Know

The Ghost of Exploits Past: A Deep Dive into the Morris Worm

Rsunk your Battleship: An Ocean of Data Exposed through Rsync

This One Time on a Pen Test, Part 5: From Physical Security Weakness to Strength

Password Tips from a Pen Tester: Are 12-Character Passwords Really Stronger, or Just a Dime a Dozen?

Patrick Laverty

This One Time on a Pen Test, Part 4: From Zero to Web Application Admin through Open-Source Intelligence Gathering

Security Impact of Easily Accessible UART on IoT Technology

Password Tips From a Pen Tester: Common Patterns Exposed

Patrick Laverty

Coinhive: Making Other People’s Web Browsers Mine Cryptocurrency