Posts with tag: pentest

10 Dec 2021 | 8 min read

Vulnerability notes: Log4Shell

Everything you should know about the Log4Shell vulnerability (CVE-2021-44228)

Java JNDI deserialization CVE-2021-44228 pentest

18 Jun 2021 | 8 min read

Exploiting insecure RCCMD installations

Owning systems through remote control software

penetration-test pentest RCCMD

8 Feb 2020 | 14 min read

An Trinhs RMI Registry Bypass

A closer look at the RMI Registry whitelist bypass gadget from An Trinhs Blackhat Europe 2019 presentation

Java RMI deserialization Gadgets pentest penetration-test

30 Oct 2019 | 7 min read

(Ab)using Linux SNMP for RCE

How to use a SNMP write community to gain (remote) code execution as root on Linux systems

SNMP Linux penetration-test pentest privilege-escalation

28 Apr 2019 | 16 min read

Attacking RMI based JMX services

An attack primer on how to hack into RMI based JMX services

Java RMI JMX deserialization pentest penetration-test

25 Mar 2019 | 24 min read

Attacking Java RMI services after JEP 290

An attack primer on how to attack Java RMI services using Java deserialization

Java RMI deserialization bsides pentest