LABS / PUBLICATIONS
VPN Security
Research, published with evidence and technical context.
Bypassing the FortiGate Symlink Patch: The Double Slash Technique (CVE-2025-68686)
Peter Gabaldon analyzes a security vulnerability in Fortinet’s SSL-VPN, revealing a flaw in a patch that fails to block unauthorized access through a double slash in file paths. Despite a subsequent patch,…
SinkVPN: Redirecting endpoint cloud telemetry by abusing usermode VPN tunnels
The article discusses SinkVPN, a technique that enables non-admin users to create malicious VPN connections that can divert and block cloud-bound traffic, evading security measures. It highlights the ease of implementation across…