Results for “exploit”

Detects fileless malware and in-memory attacks that execute entirely in RAM without writing persistent files to disk, evading traditional antivirus. Use when building detections for PowerShell-based attacks, reflective DLL injection, WMI persistence, and registry-resident malware. Activates for requests involving fileless malware detection, in-memory attacks, PowerShell exploitation, or living-off-the-land techniques.

The English summary is being prepared. Showing the original description.

Detect cyber attacks targeting OT historian servers (OSIsoft PI, Ignition, Wonderware) that sit at the IT/OT boundary and serve as pivot points for lateral movement between enterprise and control networks, including data manipulation, unauthorized queries, and exploitation of historian-specific vulnerabilities.

The English summary is being prepared. Showing the original description.

Detect and prevent API enumeration attacks including BOLA and IDOR exploitation by monitoring sequential identifier access patterns and authorization failures.

The English summary is being prepared. Showing the original description.

Plan and execute a comprehensive red team engagement covering reconnaissance through post-exploitation using MITRE ATT&CK-aligned TTPs to evaluate an organization's detection and response capabilities.

The English summary is being prepared. Showing the original description.

Deploy and configure the Havoc C2 framework with teamserver, HTTPS listeners, redirectors, and Demon agents for authorized red team operations.

The English summary is being prepared. Showing the original description.

Build and configure a resilient command-and-control infrastructure using BishopFox's Sliver C2 framework with redirectors, HTTPS listeners, and multi-operator support for authorized red team engagements.

The English summary is being prepared. Showing the original description.

Analyzes network traffic captures and flow data to identify adversary activity during security incidents, including command-and-control communications, lateral movement, data exfiltration, and exploitation attempts. Uses Wireshark, Zeek, and NetFlow analysis techniques. Activates for requests involving network traffic analysis, packet capture investigation, PCAP analysis, network forensics, C2 traffic detection, or exfiltration detection.

The English summary is being prepared. Showing the original description.

Zigbee, Thread, and Matter mesh-protocol attack methodology — IEEE 802.15.4 sniffing with TI CC2531 / CC2540 / Sonoff Zigbee Dongle E, KillerBee toolkit, Touchlink commissioning abuse with the well-known transport key, replay/injection attacks, Zigbee Cluster Library command abuse for door locks and bulbs, Thread network credential theft, Matter commissioning chain analysis, and 6LoWPAN/IPv6 routing exploitation. Use when targeting smart-home or commercial mesh deployments, Zigbee-based door locks, lighting, or sensor networks.

The English summary is being prepared. Showing the original description.

You are helping a penetration tester exploit HTTP request smuggling

The English summary is being prepared. Showing the original description.

You are helping a penetration tester exploit PHP deserialization

The English summary is being prepared. Showing the original description.

You are helping a penetration tester exploit server-side template injection in a

The English summary is being prepared. Showing the original description.

You are helping a penetration tester exploit UNION-based SQL injection. The

The English summary is being prepared. Showing the original description.

You are helping a penetration tester exploit stacked query SQL injection

The English summary is being prepared. Showing the original description.

You are helping a penetration tester exploit file inclusion vulnerabilities. The

The English summary is being prepared. Showing the original description.

You are helping a penetration tester exploit .NET deserialization

The English summary is being prepared. Showing the original description.

You are helping a penetration tester exploit server-side template injection in a

The English summary is being prepared. Showing the original description.

You are helping a penetration tester exploit authenticated access to Apache

The English summary is being prepared. Showing the original description.

You are helping a penetration tester exploit DOM-based cross-site scripting. The

The English summary is being prepared. Showing the original description.

You are helping a penetration tester exploit reflected cross-site scripting. The

The English summary is being prepared. Showing the original description.

You are helping a penetration tester exploit XXE injection. The target application

The English summary is being prepared. Showing the original description.

IoT and embedded device security testing methodology. Covers hardware reconnaissance (UART, JTAG, SWD, SPI flash, I2C EEPROM, eMMC chip-off), firmware acquisition (vendor portals, OTA capture, flash dump, binwalk extraction), firmware analysis (filesystem mounting, binary triage, hardcoded secrets, default credential discovery), bootloader attacks (U-Boot console, secure-boot bypass, fault injection), runtime attacks on embedded Linux/RTOS (busybox CVEs, MTD writes, /dev/mem), wireless protocol attacks (Zigbee, BLE, Z-Wave, LoRaWAN, Thread/Matter, sub-GHz), MQTT/CoAP/Modbus/BACnet/OPC-UA exploitation, mobile companion app analysis, cloud-IoT API abuse, and side-channel/glitching basics. Use for IoT pentest, smart-home assessment, ICS/OT testing, or embedded vulnerability research.

The English summary is being prepared. Showing the original description.

You are helping a penetration tester exploit Apache JServ Protocol (AJP)

The English summary is being prepared. Showing the original description.

You are helping a penetration tester exploit OS command injection. The target

The English summary is being prepared. Showing the original description.

You are helping a penetration tester exploit Cross-Origin Resource Sharing

The English summary is being prepared. Showing the original description.