Category: Labs

Feb 4, 2026

The €10 Mirror: Why Enterprise Security Looks Like a Kid’s Toy
Jan 9, 2026

CVE-2024-30376 Unpatched: Advanced IP Scanner still ships a Qt LPE in the same build that leaks NTLM
Jan 7, 2026

CVE-2025-1868 Unpatched: Advanced IP Scanner still silently exposing NTLM during scans 9 months later
Dec 17, 2025

CMS Media Timeleaks in Jetpack, WordPress and beyond: A Risky OpSec Issue
Dec 9, 2025

How We “Stole” a Non-Public CVE: Draft Artifacts as an Attack Surface
Nov 20, 2025

Beyond CVE-2025-31702: From arbitrary file reading to admin account takeover (Part III)
Oct 29, 2025

Beyond CVE-2025-31702: P2P relay exposure and auto-update mismatches (Part II)
Oct 15, 2025

CVE-2025-31702: What a DFIR on Dahua devices taught us
Sep 30, 2025

USBCoercer: USB WPAD Injection for NTLM Coercion
Sep 23, 2025

Building Pentest Scripts with PyInstaller – Evading EDR