Scorpion Labs Blog

Scorpion Labs Blog

blog-bg-shape

Reverse Engineering on Windows Without Symbols or Source, Part Fun (One)

Foreword Application penetration tests are often supported by the cust...

Hello Open Hash API

Introduction Hash cracking plays a valuable role when penetration test...

The Paradigms of Security Testing

Security testing is an indispensable part of any comprehensive securit...

Java Deserialization Gadget Chains

Intro In my short security testing history, Java deserialization vulne...

Let's Talk About X! (The X Window System, Of Course!)

Foreword Of course, I meant the X Window System, right? Definitely not...

Sometimes Exploits Need Patches Too! Working Through a Change of Address

Foreword It wouldn’t be the first time on a penetration test (and cert...

The Perils of Password Reuse

In security, it’s often the simplest things that people neglect, and i...

Chaining for Critical: Unauthorized to Cloud Administrator

Introduction It is not uncommon on penetration tests to find misconfig...

Anatomy of an IoT Exploit, from Hands-On to RCE

Foreword This study concerns the firmware of the Wavlink Wireless-AC12...

_linkedin_partner_id = "4835113"; window._linkedin_data_partner_ids = window._linkedin_data_partner_ids || []; window._linkedin_data_partner_ids.push(_linkedin_partner_id); (function(l) { if (!l){window.lintrk = function(a,b){window.lintrk.q.push([a,b])}; window.lintrk.q=[]} var s = document.getElementsByTagName("script")[0]; var b = document.createElement("script"); b.type = "text/javascript";b.async = true; b.src = "https://snap.licdn.com/li.lms-analytics/insight.min.js"; s.parentNode.insertBefore(b, s);})(window.lintrk); <img height="1" width="1" style="display:none;" alt="" src="https://px.ads.linkedin.com/collect/?pid=4835113&fmt=gif">