Technical deep-dives into offensive security, vulnerability research, and penetration testing
Quantifying Amazon GuardDuty's detection performance across attack types by measuring the time delta between attack and detection in a controlled AWS environment.
Read Full Article
A comprehensive analysis of combining SMBGhost (CVE-2020-0796) and SMBleed (CVE-2020-1206) vulnerabilities to achieve pre-authenticated remote code execution on vulnerable Windows 10 systems. This article demonstrates the exploitation process and provides insights into the underlying vulnerability mechanics.
Read Full Article
Exploring various Docker-based privilege escalation techniques including file manipulation, container escape methods, and misconfigurations that can lead to root access. This practical guide covers both offensive techniques and defensive recommendations for securing Docker environments.
Read Full Article