Conditional DDE Here’s a little t... 2017-12-5 19:31:4 | 阅读: 30 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu dde payload powershell simulate stoppers

Notes on McAfee Security Scan Plus RCE (CVE-2017-3897) At the end of las... 2017-8-14 15:27:21 | 阅读: 33 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu mcafee software security ssp remote

Fools of Golden Gate In this blog post, we once again demonstrate that excessive reliance on automated tool... 2017-5-8 16:7:39 | 阅读: 49 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu sf gate zdi x20did obey

Not so unique snowflakes When faced with the problem of identifying entities, most people reach for incremental... 2017-2-17 23:59:20 | 阅读: 24 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu uuids burp attacker identifiers pentesters

Beyond detection: exploiting blind SQL injections with Burp Collaborator It’s been a steady trend that most of our pentest projects revolve around web applicat... 2017-1-3 18:34:5 | 阅读: 30 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu burp duncan payload python

An update on MD5 poisoning Last year we published a proof-of-concept tool to demonstrate bypasses against s... 2016-11-28 20:0:0 | 阅读: 30 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu panda security pcopinfo requesting sheep

Bake your own EXTRABACON In the last couple of days we took a closer look at the supposed NSA exploit EXTRABACO... 2016-8-25 16:23:5 | 阅读: 36 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu a5 firmware asa shellcode extrabacon

Accessing local variables in ProGuarded Android apps Debugging applications without access to the source code always has its problems, espe... 2016-6-16 18:43:40 | 阅读: 32 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu smali pgdebug hu dosecret

Detecting ImageTragick with Burp Suite Pro After ImageTragic... 2016-5-13 22:53:27 | 阅读: 27 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu rce1 burp payload reused

iOS HTTP cache analysis for abusing APIs and forensics We’ve tested a nu... 2016-5-6 19:29:3 | 阅读: 26 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu cfurl database burp blobs analysis

You’re not looking at the big picture When serving imag... 2016-2-11 00:5:7 | 阅读: 26 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu burp proxy payload security developers

Testing stateful web application workflows SANS Institute ac... 2016-1-15 20:34:28 | 阅读: 31 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu workflows burp gold stateful facing

Proxying nonstandard HTTPS traffic Depending on the... 2015-10-2 16:42:52 | 阅读: 35 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu proxy erlang client handshake chose

Finding the salt with SQL inception IntroductionWeb application penetration testing is a well researched area with prove... 2015-9-17 22:19:10 | 阅读: 23 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu duncan database passwords mytarget

Virtual Bank Robbery - In Real Life IntroductionThi... 2015-6-19 19:25:29 | 阅读: 38 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu tick remote eicar exploited

Poisonous MD5 - Wolves Among the Sheep MD5 is known to b... 2015-6-10 15:21:33 | 阅读: 31 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu security collision malicious shellcode

Testing Oracle Forms SANS Institute ac... 2015-5-27 17:32:39 | 阅读: 31 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu security gold proprietary github

CVE-2014-3440 - Symantec Critical System Protection Remote Code Execution Today we release... 2015-5-7 19:34:44 | 阅读: 29 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu symantec scsp pwd security somehow

The story of a pentester recruitment IntroLast year we decided to expand our pentest team, and we figured that offering a... 2015-4-3 15:53:7 | 阅读: 42 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu wp library recruit openvms security

AIX for Penetration Testers Silent Signal Professional Ethical Hacking Services ... 2015-1-9 16:33:26 | 阅读: 30 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu ethical