TL;DR Introduction In late 2024, we found multiple vulnerabilities in GivEnergy home battery systems that could allow ...
TL;DR How we ended up here My colleague Adam Bromiley and I recently tripped over one of those ‘What!?’ findings. We could completely break an IT-OT segmentation without having to do … anything. We ...
On Tuesday 4 th August, 5 brave souls set off to the faraway climes of Nevada, bound for DEF CON 34. We had 9 cases of tech with us, a motley assortment of flight simulators, industrial control CTFs ...
Last year one of my colleagues, Ken, received the sad news that a father of a friend had passed away. He was a tech-savvy gentleman and had invested in smart tech to make his and his family’s life ...
UK Office. Pen Test Partners LLP, Unit 2, Verney Junction Business Park, Buckingham, MK18 2LB, United Kingdom +44 20 3095 0500 ...
Our Paul Brownridge will be presenting: In 30 minutes, access the building and takeover the domain. Mission Improbable? Follow a penetration tester through the key stages of an engagement, from ...
Unauthorised network access remains a significant threat, especially for organisations lacking robust network security controls. If an attacker infiltrates a building and connects their device to the ...
Following our recent demonstration at the Infosecurity Show and with Rory Cellan-Jones on the BBC here’s a write up and more technical detail on the Smarter iKettle hack. First, kudos is due to Mark ...
I’ve had a keen interest in the original RottenPotato and JuicyPotato exploits that utilize DCOM and NTLM reflection to perform privilege escalation to SYSTEM from service accounts. The applications ...
As Red Teamers, we often find information in SharePoint that can be useful for us in later attacks. As part of this we regularly want to download copies of the file, or parts of their contents. In ...
Fastboot is a client-server tool and protocol that was added to the Android bootloader since the early days of Android. It is pretty much always used by the Android bootloader and can be seen on ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results