Scorpion Labs Blog

Scorpion Labs Blog

blog-bg-shape

Anatomy of an IoT Exploit, From Hands-On to RCE: Folie a Deux!

At a Glance This post documents the full discovery and exploitation pr...

A New Twist On An Old Trick: XXE-to-NTLM

At a Glance This post explores a real-world attack chain combining XXE...

Reverse Engineering on Windows Without Symbols or Source, (Part One)

At a Glance This post walks through practical approaches to reverse en...

Hello Open Hash API

At a Glance This post breaks down the Open Hash API (OHA), a container...

The Paradigms of Security Testing

At a Glance This post explores the major paradigms of security testing...

Java Deserialization Gadget Chains

At a Glance This post walks through Java deserialization exploitation ...

Let's Talk About X! (The X Window System, Of Course!)

At a Glance This post breaks down how exposed X Window System displays...

Sometimes Exploits Need Patches Too!

At a Glance This post goes through the process of repairing a return-o...

The Perils of Password Reuse

At a Glance This post examines how password reuse is exploited during ...

Chaining for Critical: Unauthorized to Cloud Administrator

At a Glance This post explores a real-world application penetration te...

_linkedin_partner_id = "4835113"; window._linkedin_data_partner_ids = window._linkedin_data_partner_ids || []; window._linkedin_data_partner_ids.push(_linkedin_partner_id); (function(l) { if (!l){window.lintrk = function(a,b){window.lintrk.q.push([a,b])}; window.lintrk.q=[]} var s = document.getElementsByTagName("script")[0]; var b = document.createElement("script"); b.type = "text/javascript";b.async = true; b.src = "https://snap.licdn.com/li.lms-analytics/insight.min.js"; s.parentNode.insertBefore(b, s);})(window.lintrk); <img height="1" width="1" style="display:none;" alt="" src="https://px.ads.linkedin.com/collect/?pid=4835113&fmt=gif">