Resources

Datasheet Icon
Datasheet

Core Provisioning

Provisioning is Core Security’s user provisioning solution for organizations seeking to improve alignment with business goals; cut costs; enforce compliance with internal security policies, industry standards and government regulations; and reduce the risk of security incidents. Part of Core Security’s Enterprise Suite of products, Core Provisioning delivers these benefits by accelerating the...
IGA
Datasheet Icon
Datasheet

Core Impact

Core Impact empowers organizations to proactively minimize risk and protect critical assets by using the same techniques as today’s threat actors to assess their infrastructure’s security posture. This powerful platform provides a unified environment for managing all phases of the penetration testing process, from reconnaissance to reporting. Intuitive User Interface Core Impact features a...
Penetration Testing
Article

How to Phish with Core Impact

Core Impact 18.1 release brought a ton of streamlined enhancements and new capabilities to the client-side vector in general, and phishing in particular. To be clear on terms, I consider phishing to be inducing a target to follow a link presented in an email for the purposes of capturing credentials for some system or another. Using an email to get a user to overtly run a compromised attachment...
Penetration Testing
Article

The Unpatched LSASS Remote Denial of Service (MS16-137)

In November 8, 2016 Microsoft released a security update for Windows Authentication Methods (MS16-137) which included 3 CVEs: Virtual Secure Mode Information Disclosure Vulnerability CVE-2016-7220 Local Security Authority Subsystem Service Denial of Service Vulnerability CVE-2016-7237 Windows NTLM Elevation of Privilege Vulnerability CVE-2016-7238 Talking specifically about CVE-2016-7237, this…
Article

Getting Physical: Extreme abuse of Intel based Paging Systems - Part 3 - Windows HAL's Heap

Continuing with my Getting Physical blog posts series (CanSec2016’s presentation), in this third episode I’m going to talk about how Windows Paging is related to the HAL's heap and how it can be abused by kernel exploits. This is probably the simplest way of abusing Windows paging structures, because deep knowledge about how Intel paging works is not necessary to implement the attack.
Article

Abusing GDI for ring0 exploit primitives

Every once in a while I get to work on something special, something that leaves me with the keys to open new doors. Introduction: Not long ago I came across a certain font related vulnerability, it was a 0day being exploited in the wild...
Article

Early Release Exploit for MS14-068 Vulnerability (Affecting Kerberos)

A few weeks ago a critical vulnerability (MS14-068) affecting Windows environments was published by Microsoft (credited to Tom Maddock and team). Specifically, the vulnerability affects Kerberos. [The vulnerability will] allow an attacker to elevate unprivileged domain user account privileges to those of the domain administrator account.
Article

Exploiting CVE-2015-0311: A Use-After-Free in Adobe Flash Player

At the end of January, Adobe published the security bulletin APSA15-01 for Flash Player, which fixes a critical use-after-free vulnerability affecting Adobe Flash Player 16.0.0.287 and earlier versions. This vulnerability, identified as CVE-2015-0311, allows attackers to execute arbitrary code...
Article

Linux Flash for Newbies: How Linux Works with Flash

In the first series of this introduction to Linux and flash, we began with a basic lesson on flash memory. In part two, we can begin to tackle how Linux interacts with it. From this point forward, we’ll focus on NAND flash, with the following assumptions...
Article

Linux Flash for Newbies: Flash Memory Basics

During hardware-oriented engagements, we are sometimes faced with a hardware device's firmware image. This may happen because we downloaded a firmware upgrade image to try to understand a device with a view of finding security flaws...
Penetration Testing
Article

Bypassing CVE-2018-15442: Another Case of DLL Hijacking

As an exploit writer, one of my tasks consists of gathering common vulnerabilities and exposures (CVE) and all of the information related to them in order to design an exploit for Core Impact. As part of this process I stumbled across CVE-2018-15422: A vulnerability in the update service of Cisco WebEx Meetings Desktop App for Windows. 
Mysterious hacker
Video

The Truth About Viruses on Linux

Wed, 05/20/2020
There are many myths about viruses and Linux—including the belief that the system is immune. A startling increase in malware, ransomware and malicious code targeting Linux systems of all shapes and sizes means the days of believing it’s “just a Windows thing” are over. In reality, Linux is becoming a lucrative target. It’s time to take action to protect your Linux environment and surrounding...
Threat Detection
World with security shield
Video

Why Endpoint Antivirus Belongs in Your Security Environment

Wed, 05/20/2020
Most organizations are vigilant about scanning their workstation PCs. Unfortunately, malware and other destructive entities can just as easily target your servers, both on-premise or in the cloud, so many environments remain unprotected. Endpoint antivirus software is used to provide virus protection to endpoints, like servers, which connect to enterprise networks. Endpoint antivirus software...
Threat Detection
Malware Bug
Guide

2020 Malware Report

The Challenge of Malware: Finding Long Term Solutions for a Chronic Problem No matter how much technology progresses, malware continues to be a consistent menace that never seems to grow outdated. No matter how long the fight against malware has been, there is always more to learn in order to better safeguard against attacks. Finding out what other organizations are experiencing, and how they're...
Threat Detection
Penetration Testing Toolkit
Guide

Penetration Testing Toolkit

Safeguard your infrastructure and data With today’s constantly-shifting threat landscape, most organizations know they must employ offensive security measures like penetration testing to stay a step ahead of attackers. Based on our years of experience helping organizations manage security risks across the enterprise, we’ve compiled a collection of penetration testing tools and resources to set you...
Penetration Testing