When you think of office security, you probably picture high-tech firewalls and complex passwords, right? But what about the simpler tools we rely on daily, like lanyards and RFID cards? Sometimes, the real weak spots aren’t in the IT infrastructure at all - they’re in the everyday interactions
penetration test
SilentGrid delves into the impact of a SQL injection that affected a healthcare application, which claimed to adequately protect the privacy of its users
ot
In the realm of industrial control, Industrial Control Systems (ICS) play a crucial role in overseeing complex processes, with the widely used Modbus protocol serving as a key player in communication. This blog will delve into the security concerns surrounding ICS, placing a particular focus on the Modbus protocol, which
rce
During a recent engagement against a web application, a known vulnerability, CVE-2020-35340 was exploited to gain remote code execution on the server hosting the application
adversary simulation
Attack Infrastructure Automation Part 2 - Terraform module design, software setup and configuration, and operator experience
xxe
During one of our perimeter assessment exercises, we identified and exploited a vulnerability in an in-house developed thin client
adversary simulation
Attack Infrastructure Automation Part 1 - An overview of our approach, main building blocks and design choices
cve
SilentGrid identified an unauthenticated time-based blind SQL injection in Global Vision Media's Blueprint Learning Management System (LMS)
research
An attack path from a recent engagement involving symbolic links
Stay informed with our expert articles and practical advice. Subscribe to our blog today.
SilentGrid identified a blind SQL injection vulnerability in Hexagon's GeoMedia WebMap 2020 solution
Who tries to knock on your server's door(s)
CVE-2017-[0037 and 0059]
PoC exploit for a type confusion issue in Internet Explorer 10, 11 and Edge
PoC exploit for an use-after-free bug in IE
A Proof of Concept exploit for CVE-2016-0450 in Oracle GoldenGate
A walkthrough of 4N006135 Level 2
CVE-2017-4907
CVE-2017-3195
Solution for Fusion Level02
Solution for Fusion Level01
A Proof of Concept exploit for CVE-2015-6946 in Borland AccuRev
