Menu
  • PRIVACY
  • WHO WE ARE
  • HOW IT WORKS
  • BLOG
  • ADVISORIES
  • LOG IN
  • SIGN UP
  • thezdi
  • Trend Micro
thezdi
Menu
  • PRIVACY
  • WHO WE ARE
  • HOW IT WORKS
  • BLOG
  • ADVISORIES
  • LOG IN SIGN UP
SUBSCRIBE
Pwn2Own Automotive 2025 - Day Three and Final Results
Blog post

Exploiting Exchange PowerShell After ProxyNotShell: Part 4 – No Argument Constructor

  • September 26, 2024
  • Microsoft, Exchange, Research
Pwn2Own Automotive 2025 - Day Three and Final Results
Blog post

Exploiting Exchange PowerShell After ProxyNotShell: Part 3 – DLL Loading Chain for RCE

  • September 19, 2024
  • Exchange, Microsoft, Research
Pwn2Own Automotive 2025 - Day Three and Final Results
Blog post

Exploiting Exchange PowerShell After ProxyNotShell: Part 2 - ApprovedApplicationCollection

  • September 12, 2024
  • Microsoft, Exchange, Research
Pwn2Own Automotive 2025 - Day Three and Final Results
Blog post

Exploiting Exchange PowerShell After ProxyNotShell: Part 1 - MultiValuedProperty

  • September 05, 2024
  • Exchange, Research, Microsoft
Pwn2Own Automotive 2025 - Day Three and Final Results
Blog post

Unpatched Powerful SSRF in Exchange OWA – Getting Response Through Attachments

  • November 02, 2023
  • Microsoft, Exchange, 0-day
Pwn2Own Automotive 2025 - Day Three and Final Results
Blog post

Control Your Types or Get Pwned: Remote Code Execution in Exchange PowerShell Backend

  • November 16, 2022
  • Exchange, Microsoft, 0-day

General Inquiries

zdi@trendmicro.com

Find us on X

@thezdi

Find us on Mastodon

Mastodon

Media Inquiries

media_relations@trendmicro.com

Sensitive Email Communications

PGP Key
WHO WE ARE
  • Our Mission
  • Trend Micro
  • TippingPoint IPS
HOW IT WORKS
  • Process
  • Researcher Rewards
  • FAQS
  • Privacy
ADVISORIES
  • Published Advisories
  • Upcoming Advisories
  • RSS Feeds
BLOG
thezdi