LRQA Cyber Labs@LRQA_Cyber_Labs

Here we share infosec tips, tricks, tools and tutorials, by the technical folks at @LRQA_Nettitude. Follow us for regular #cybersecurity content!

lrqa.com/en/cyber-labs/
Joined January 2016
27 Photos and videos
Calling all Red Teamers 🚨 Today we are introducing Tartarus-TpAllocInject, a new OPSEC-safe loader and technique for bypassing EDR solutions, by @trickster012 labs.nettitude.com/blog/crea…

Creating an OPSEC safe loader for Red Team Operations

As Red Teamers, we need an OPSEC safe method to execute shellcode via a range of initial access vectors. Things are getting more and more difficult with Endpoint Detection and Response (EDR) products...

lrqa.com
3
146
428
70,292
🚨 CVE-2025-5333: Critical RCE vulnerability in Broadcom Symantec Endpoint Management Suite discovered by LRQA's Lefteris Panos during a recent red team engagement. Our latest Cyber Labs article includes a technical walkthrough and mitigation guidance. lrqa.com/en/cyber-labs/remot…

Remote Code Execution in Broadcom Altiris IRM

A critical unauthenticated remote code execution (RCE) vulnerability was discovered in the Broadcom Symantec Altiris Inventory Rule Management (IRM) component of Symantec Endpoint Management.

lrqa.com
2
3
531
🦝 Introducing Raccoon - a C# tool developed by LRQA's @eks_perience for extending the screenshot functionality of Command and Control (C2) frameworks, even capturing minimised windows. Check it out on GitHub and in our latest Labs article below.
2
13
36
3,600
lrqa.com/en/cyber-labs/intro…

Introducing Raccoon

Introducing Raccoon - a C# tool for extending the screenshot functionality of Command and Control (C2) frameworks, even capturing minimised windows

lrqa.com
5
352
Learn how to debug shellcode using Time Travel Debugging (TTD) in Binary Ninja! This guide walks you through analysing, capturing, and debugging shellcode traces for seamless malware analysis or development.
1
3
564
lrqa.com/en/cyber-labs/time-…

Time Travel Debugging Shellcode with Binary Ninja

Learn how to debug shellcode using Time Travel Debugging (TTD) in Binary Ninja. This guide walks you through analysing, capturing, and debugging shellcode traces for seamless malware analysis or...

lrqa.com
1
271
Today we are releasing TokenCert, a C# tool that will create a network token using a provided certificate via PKINIT, by @lefterispan This is useful for Red Teams giving make-token functionality with certificates instead of passwords. github.com/nettitude/TokenCe…

GitHub - nettitude/TokenCert: TokenCert

TokenCert. Contribute to nettitude/TokenCert development by creating an account on GitHub.

github.com
1
49
142
21,983
Today we are releasing fix-stomped-imports, a plugin for Binary Ninja which allows vulnerability researchers to reconstruct malware with stomped headers. labs.nettitude.com/blog/bina… We recently used this during an incident to reverse engineer a sample of WhiteRabbit ransomware, as demonstrated in our latest Labs post. #InfoSec #ReverseEngineering #MalwareAnalysis
11
23
1,607
Physical Security Testers 🔒 Learn about an easy-to-use tool for capturing and cloning employee RFID badges, in our latest Labs post. #InfoSec #CyberSecurity labs.nettitude.com/blog/this…
9
13
1,130
Starting the reverse engineering process from scratch every time a new software version is released? Find out how to use Ghidra's Version Tracking tool in our latest Labs post, by @ByteInsight labs.nettitude.com/blog/vers…

Version Tracking in Ghidra

When a binary is reverse engineered using Ghidra, various annotations are applied to aid in understanding the binary’s behaviour. These annotations come in the form of comments, renamed functions,...

lrqa.com
6
19
1,910
🚨We have just opened up our next Red Team Training course, in October! Sign up here: labs.nettitude.com/training/…
1
2
475
Need to emulate firmware to test the security of a device? In our latest Labs post, we show how to use Qiling to emulate the firmware of a wireless travel router, by @ByteInsight. labs.nettitude.com/blog/emul…
13
27
2,644
🚨 CVE-2024-20356: Command Injection in Cisco's CIMC, discovered by LRQA Nettitude's @thackeraaron. Full technical details and exploit toolkit are included in our latest Labs article below. #CVE #Cisco #Exploit labs.nettitude.com/blog/cve-…

CVE-2024-20356: Jailbreaking a Cisco appliance to run DOOM

A walkthrough of CVE-2024-20356, a high severity Command Injection vulnerability affecting a range of Cisco products. This vulnerability can be used in a larger attack chain to compromise the Secure...

lrqa.com
4
14
963
Analysis of CVE-2024-31497: A signature generation flaw in a popular Windows SSH client, PuTTY, leaks user's private SSH keys. labs.nettitude.com/blog/flaw…

Flaw in PuTTY P-521 ECDSA signature generation leaks SSH private keys

This article provides a technical analysis of CVE-2024-31497, a vulnerability in PuTTY discovered by Fabian Bäumer and Marcus Brinkmann of the Ruhr University Bochum.

lrqa.com
3
7
1,099
Introducing SharpConflux, a .NET tool built to facilitate Confluence exploration during Red Team engagements. Find out more and download SharpConflux in our latest LRQA Nettitude Labs article. labs.nettitude.com/blog/intr…

Introducing SharpConflux

Today, we are releasing a new tool called SharpConflux, a .NET application built to facilitate Confluence exploration. It allows Red Team operators to easily investigate Confluence instances with the...

lrqa.com
29
65
6,145
CVE-2024-25153: Remote Code Execution vulnerability in Fortra FileCatalyst. Full exploit and technical details included in our latest Labs post. labs.nettitude.com/blog/cve-…
13
32
2,995
Introducing Yasha - Yet Another Security Header Analyser! Get accurate results from across an entire web application, rather than just scanning a single page. labs.nettitude.com/blog/intr…

Yasha - Yet Another Security Header Analyser

Security headers. Everyone’s encountered them. Security testers find them on every web application test, and it can be tedious work identifying these weaknesses that usually have low impact and low...

lrqa.com
1
2
540
Dive into the world of Artificial Intelligence prompt injections with BloreBank Chatbot, an interactive game designed to challenge your skills and knowledge! Perfect for anyone keen on understanding the security implications of AI. labs.nettitude.com/blog/blor…
7
9
1,068
Congratulations to @ByteInsight who was successful with his exploit against the ChargePoint Home Flex at Pwn2Own Tokyo!
TrendAI Zero Day Initiative
@thezdi
24 Jan 2024
Connor Ford (@ByteInsight) of Nettitude executed his attack against the ChargePoint Home Flex. Off to the disclosure room for confirmation now. #Pwn2Own
2
6
927
LRQA Cyber Labs retweeted
Mike Felch (Stay Ready)
@ustayready
30 Nov 2023
Great post on a red team loader technique but also has good coverage of bad OPSEC labs.nettitude.com/blog/crea…
LRQA Cyber Labs@LRQA_Cyber_Labs
29 Nov 2023
Calling all Red Teamers 🚨 Today we are introducing Tartarus-TpAllocInject, a new OPSEC-safe loader and technique for bypassing EDR solutions, by @trickster012 labs.nettitude.com/blog/crea…
8
44
7,926
Load more