Our new tool for enumerating hidden Log4Shell-affected hosts Log4Shell, formal... 2021-12-13 04:19:44 | 阅读: 52 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu username log4shell identify

Fuzzy Snapshots of Firefox IPC In January Mozilla published a post on their Attack & Defense blog about Effectively F... 2021-10-14 17:19:36 | 阅读: 36 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu kf memory serialized crash

Adding XCOFF Support to Ghidra with Kaitai Struct It’s not a secret that we at Silent Signal are hopeless romantics, especially when it... 2021-4-6 23:3:23 | 阅读: 44 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu ghidra xcoff kaitai loader aix

Abusing JWT public keys without the public key This blog post is dedicated to those to brave souls that dare to roll their own crypto... 2021-2-8 16:21:55 | 阅读: 49 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu pkcs security ordering library gcd

Unexpected Deserialization pt.1 - JMS On a recent engagement our task was to assess the security of a service built on IBM I... 2020-8-17 20:0:13 | 阅读: 38 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu jms client mq getbody ocular

Tips and scripts for reconnaissance and scanning Silent Signal Professional Ethical Hacking Services ... 2020-5-20 19:49:1 | 阅读: 29 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu ethical

Decrypting and analyzing HTTPS traffic without MITM Sniffing plaintext network traffic between apps and their backend APIs is an important... 2020-5-4 16:29:29 | 阅读: 31 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu burp network client pdml decrypted

Uninitialized Memory Disclosures in Web Applications While we at Silen... 2020-4-20 17:1:30 | 阅读: 25 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu memory disclosures papers chris

Unix-style approach to web application testing SANS Institute ac... 2020-3-27 17:11:28 | 阅读: 25 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu gold piper internals throwaway

Wide open banking: PSD2 and us With the advent o... 2020-1-27 16:0:27 | 阅读: 27 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu security tampering workings resending

Patching Android apps: what could possibly go wrong Many tools are timeless: a quality screwdriver will work in ten years just as fine as... 2019-10-21 22:13:46 | 阅读: 23 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu apk 9824 objection python3 apktool

Evading Cisco AnyConnect blocking LAN connections Some VPNs allow split tunneling, however, Cisco AnyConnect and many other solutions of... 2019-7-2 18:56:21 | 阅读: 40 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu sslh ssh client 19158 apart

Self-defenseless - Exploring Kaspersky’s local attack surface I had the pleasur... 2019-6-24 15:47:10 | 阅读: 28 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu github curious pleasure euskalhack motivation

Decrypting Eazfuscator.NET encrypted symbol names There are many obfuscators for different languages, and some of those offer reversible... 2019-5-10 16:40:52 | 阅读: 48 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu pbkdf2 decryptor obfuscator pkcs7 resulted

Drop-by-Drop: Bleeding through libvips During a recent engagement we encountered a quite common web application feature: prof... 2019-4-18 17:23:59 | 阅读: 27 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu memory libvips cinfo fingerping sharp

Our take on social engineering Like many other offensive IT security companies, we also offer social engineerin... 2019-4-4 22:52:46 | 阅读: 25 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu security attacker caught malicious chapter

The curious case of encrypted URL parameters As intra-app URLs used in web applications are generated and parsed by the same code b... 2018-5-22 13:43:24 | 阅读: 28 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu ciphertext payload encryption developers flip

Snow cannon vs. unique snowflakes — testing registration forms Many of the web a... 2018-2-2 17:24:4 | 阅读: 29 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu uniqueness burp extender identical username

Bare Knuckled Antivirus Breaking Endpoint security... 2018-1-8 16:55:34 | 阅读: 32 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu security bitdefender symantec avgater bypass

Emulating custom crytography with ripr Custom cryptography and obfuscation are recurring patterns that we encounter during ou... 2017-12-21 17:22:25 | 阅读: 29 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu prga memory ripr mu ksa