Background On July 19, 2024, a major IT outage disrupted several online services, causing widespread inconvenienceand highlighting the ever-present threat of cyberattacks. The glitch originated from a corruptedsoftware update sent out by security company CrowdStrike to its vast number of…
Background In today’s interconnected world, both financial institutions and cybersecurity professionals facethe daunting task of managing risks effectively to safeguard assets and data. While the domains of finance and cybersecurity may seem distinct, they share common principles in riskmanagement. In…
Background In today’s digital landscape, organizations face an ever-evolving array of cyber threats that can compromise their sensitive data, disrupt operations, and tarnish their reputation. As the frequency and sophistication of cyber-attacks continue to rise, it has become imperative for…
November 9, 2023 Remote Code Execution via Service Control Manager Written by Gervin Appiah An introduction to how to perform Remote Code Execution (RCE) and fileless lateral movement by taking advantage of the Windows Service Control Manager Background During Penetration…
November 9, 2023 Code Execution via MSSQL Written by Gervin Appiah Background It is not uncommon to discover MSSQL when testing Windows environments. If you have obtained some privileged credentials, MSSQL presents you with an alternative way of getting code…