Blog post
Exploiting Exchange PowerShell After ProxyNotShell: Part 4 – No Argument Constructor
- September 26, 2024
Blog post
Exploiting Exchange PowerShell After ProxyNotShell: Part 3 – DLL Loading Chain for RCE
- September 19, 2024
Blog post
Exploiting Exchange PowerShell After ProxyNotShell: Part 2 - ApprovedApplicationCollection
- September 12, 2024
Blog post
Exploiting Exchange PowerShell After ProxyNotShell: Part 1 - MultiValuedProperty
- September 05, 2024
Blog post
CVE-2024-30043: Abusing URL Parsing Confusion to Exploit XXE on SharePoint Server and Cloud
- May 30, 2024
Blog post
Unpatched Powerful SSRF in Exchange OWA – Getting Response Through Attachments
- November 02, 2023
Blog post
Pwn2Owning Two Hosts at the Same Time: Abusing Inductive Automation Ignition’s Custom Deserialization
- February 08, 2023
Blog post
Control Your Types or Get Pwned: Remote Code Execution in Exchange PowerShell Backend
- November 16, 2022