labs.nettitude.comTips, Tricks and Tools for Cyber Security Enthusiasts | Nettitude Labs

Skip to content Toggle Navigation Blog Tools PoshC2 PoshC2 Documentation PoshC2 Blogs PoshC2 IoCs Scrounger – iOS & Android penetration testing framework PowerThIEf SharpSocks SharpSocks Blogs Invoke-Pbind Prowl XSS Payloads Rocktastic ZeroPress Microsoft Logparser Query Files Tutorials How to fix Burp Suite SSL/TLS connection problems TLS Certificate Pinning 101 Using Frida to Bypass Snapchat’s Certificate Pinning Training Advanced Threat Actor Simulation – Red Team Training Careers Contact Nettitude.com Loading... PoshC2 Nettitude Command & Control Framework - Free and Open Source Download Vulnerability Research Regular vulnerability disclosures CVEs Red Team Training Learn to be the best, from the best Sign up Welcome to Nettitude Labs Paul Johnson 2020-12-10T01:29:00+00:00 OUR LATEST RESEARCH CVE-2020-24550: Open Redirect in Episerver Find During the course of our work, we discovered an open redirect vulnerability in Episerver Find. This has been assigned CVE-2020-24550. The Episerver platform includes content management, e-commerce functionality, marketing automation, and search and navigation capabilities. [...] By Tom Wedgbury | 2021-02-11T12:36:11+00:00 February 11, 2021 | Read More Introducing FComm – C2 Lateral Movement Over the past few years, we have found a few edge cases where the traditional lateral movement communication methods contained within PoshC2 did not suit particular client environments. To solve this problem, we have created [...] By Richard Hicks | 2021-01-27T14:03:13+00:00 January 27, 2021 | Read More VM Detection Tricks, Part 1: Physical memory resource maps In this series we’ll document a novel and as-yet-undocumented Virtual Machine detection trick for each month of 2021. These detection tricks will be focused on 64-bit Windows 10 or Windows Server 2019 guests, targeting a [...] By Graham Sutherland | 2021-01-20T14:16:02+00:00 January 20, 2021 | Read More PoshC2 Improved HTML Reports Red team operators need detailed and accurate C2 report output in order to conduct high quality work. Consequently, reporting has always been a key element of PoshC2. With this update, PoshC2s reporting engine has been [...] By Mike Bone | 2021-01-06T18:06:56+00:00 January 6, 2021 | Read More CVE-2020-14418: madCodeHook Library Local Privilege Escalation Nettitude discovered a vulnerability in the 'madCodeHook' third party library which caused a number of security products, including Cisco AMP and Morphisec Unified Threat Prevention Platform, to contain a local privilege escalation vulnerability. Since the [...] By Kyriakos Economou | 2020-12-04T22:31:39+00:00 December 1, 2020 | Read More 1 2 Next Load More Posts Search for: Projects Check out our latest projects at https://github.com/nettitude Popular Recent QNAP Signage Station: Publish and Be Damned (Part 1) February 26, 2016 PoshC2 – new features December 1, 2016 ZeroPress – A WordPress Vulnerability Hunter September 16, 2016 CVE-2020-24550: Open Redirect in Episerver Find February 11, 2021 Introducing FComm – C2 Lateral Movement January 27, 2021 VM Detection Tricks, Part 1: Physical memory resource maps January 20, 2021 Tweets by nettitude_labs Useful Links Download PoshC2 Vulnerability Research Nettitude Cyber Security Tools Red Team Training Careers at Nettitude Nettitude Labs Presented By UK 1 Jephson Court Trancred Close Leamington Spa Warwickshire CV31 3RZ Europe Leof. Siggrou 348 Kallithea Athens Greece 176 74 Americas 50 Broad Street Suite 403 New York City NY 10004 Asia 2 Science Park Drive #02-05/06 Ascent Singapore Science Park 1 Singapore 118222 CONTACT US Name * Please enter your name or handle Email address * Please enter your email address so that we can contact you. Message * Please enter your message to Nettitude Labs. Send your message × Thank you for your message. It has been sent. × There was an error trying to send your message. Please try again later. © Copyright Nettitude Twitter YouTube LinkedIn Go to Top...