41554 blogs · [ { "id": "01a0c563-0c74-706f-a556-a3e3b0dc4d03", "title": "The Good Old DNS Rebinding", "url": "https://blog.compass-security.com/2021/02/the-good-old-dns-rebinding/", "published_at": "2021-02-23T10:50:02+00:00" }, { "id": "01a0c563-0c74-706f-a556-a3e3b1959121", "title": ".CH Zone Lookup Tool", "url": "https://blog.compass-security.com/2021/01/ch-zone-lookup-tool/", "published_at": "2021-01-07T14:00:44+00:00" }, { "id": "01a0c563-0c74-706f-a556-a3e3b1c6528b", "title": "The “Volatility Triage App” for Splunk", "url": "https://blog.compass-security.com/2020/11/the-volatility-triage-app-for-splunk/", "published_at": "2020-11-24T05:48:26+00:00" }, { "id": "01a0c563-0c74-706f-a556-a3e3b278011d", "title": "Evading Static Machine Learning Malware Detection Models – Part 2: The Gray-Box Approach", "url": "https://blog.compass-security.com/2020/11/evading-static-machine-learning-malware-detection-models-part-2-the-gray-box-approach/", "published_at": "2020-11-10T05:30:00+00:00" }, { "id": "01a0c563-0c74-706f-a556-a3e3b3192e12", "title": "Burp Extension: Copy Request & Response", "url": "https://blog.compass-security.com/2020/10/burp-extension-copy-request-response/", "published_at": "2020-10-28T07:22:25+00:00" }, { "id": "01a0c563-0c74-706f-a556-a3e3b3cf50ff", "title": "Evading Static Machine Learning Malware Detection Models – Part 1: The Black-Box Approach", "url": "https://blog.compass-security.com/2020/10/evading-static-machine-learning-malware-detection-models-the-black-box-approach/", "published_at": "2020-10-06T08:00:00+00:00" }, { "id": "01a0c563-0c74-706f-a556-a3e3b3d77f5d", "title": "101 for lateral movement detection", "url": "https://blog.compass-security.com/2020/09/101-for-lateral-movement-detection/", "published_at": "2020-09-01T04:30:00+00:00" }, { "id": "01a0c563-0c74-706f-a556-a3e3b4202bc7", "title": "Make the most out of BloodHound", "url": "https://blog.compass-security.com/2020/07/make-the-most-out-of-bloodhound/", "published_at": "2020-07-30T08:46:18+00:00" }, { "id": "01a0c563-0c74-706f-a556-a3e3b4a9d9f5", "title": "Yet Another Froala 0-Day XSS", "url": "https://blog.compass-security.com/2020/07/yet-another-froala-0-day-xss/", "published_at": "2020-07-03T11:08:34+00:00" }, { "id": "01a0c563-0c74-706f-a556-a3e3b5150fe9", "title": "Relaying NTLM authentication over RPC", "url": "https://blog.compass-security.com/2020/05/relaying-ntlm-authentication-over-rpc/", "published_at": "2020-05-14T11:04:45+00:00" }, { "id": "01a0c56a-7450-7061-a862-6d4ebe1ed2c3", "title": "Reversing a .NET Orcus dropper", "url": "https://blog.compass-security.com/2020/04/reversing-a-net-orcus-dropper/", "published_at": "2020-04-14T04:30:00+00:00" }, { "id": "01a0c56a-7450-7061-a862-6d4ebe2ad5b0", "title": "New SMBGhost Vulnerability Affects Modern Windows Systems", "url": "https://blog.compass-security.com/2020/03/new-smbghost-vulnerability-affects-modern-windows-systems/", "published_at": "2020-03-13T13:17:17+00:00" }, { "id": "01a0c56a-7450-7061-a862-6d4ebf1a6c06", "title": "Domain-Join Computers the Proper Way", "url": "https://blog.compass-security.com/2020/03/domain-join-computers-the-proper-way/", "published_at": "2020-03-11T06:06:00+00:00" }, { "id": "01a0c56a-7450-7061-a862-6d4ebfacb62d", "title": "Invoice Fraud with Everything the Bag of Tricks Has to Offer", "url": "https://blog.compass-security.com/2020/02/invoice-fraud-with-everything-the-bag-of-tricks-has-to-offer/", "published_at": "2020-02-25T06:00:00+00:00" }, { "id": "01a0c56a-7450-7061-a862-6d4ec0306ca5", "title": "OWASP – Toronto January 2020", "url": "https://blog.compass-security.com/2020/02/owasp-toronto-january-2020/", "published_at": "2020-02-10T09:08:29+00:00" }, { "id": "01a0c56a-7450-7061-a862-6d4ec08b8458", "title": "Interview with Jim McKay", "url": "https://blog.compass-security.com/2020/01/interview-with-jim-mckay/", "published_at": "2020-01-29T07:31:27+00:00" }, { "id": "01a0c56a-7450-7061-a862-6d4ec096d164", "title": "Finding Active Directory attack paths using BloodHound", "url": "https://blog.compass-security.com/2019/12/finding-active-directory-attack-paths-using-bloodhound/", "published_at": "2019-12-09T05:30:00+00:00" }, { "id": "01a0c56a-7450-7061-a862-6d4ec17e458e", "title": "Challenging Your Forensic Readiness with an Application-Level Ransomware Attack", "url": "https://blog.compass-security.com/2019/11/challenging-your-forensic-readiness-with-an-application-level-ransomware-attack/", "published_at": "2019-11-25T05:30:00+00:00" }, { "id": "01a0c56a-7450-7061-a862-6d4ec209f40b", "title": "Hacking Tools Cheat Sheet", "url": "https://blog.compass-security.com/2019/10/hacking-tools-cheat-sheet/", "published_at": "2019-10-28T07:26:28+00:00" }, { "id": "01a0c56a-7450-7061-a862-6d4ec2b42644", "title": "Introducing Web Vulnerabilities into Native Apps", "url": "https://blog.compass-security.com/2019/10/introducing-web-vulnerabilities-into-native-apps/", "published_at": "2019-10-21T04:30:59+00:00" }, { "id": "01a0c573-1e50-7363-a9ac-db237e29fe66", "title": "There is such thing as a free lunch", "url": "https://blog.compass-security.com/2019/10/there-is-such-thing-as-a-free-lunch/", "published_at": "2019-10-08T04:30:17+00:00" }, { "id": "01a0c573-1e50-7363-a9ac-db237e8eaff5", "title": "A Smart Card Odyssey", "url": "https://blog.compass-security.com/2019/09/smart-card-odyssey/", "published_at": "2019-09-23T04:30:19+00:00" }, { "id": "01a0c573-1e50-7363-a9ac-db237f1f02b3", "title": "enOcean Security", "url": "https://blog.compass-security.com/2019/09/enocean-security/", "published_at": "2019-09-12T04:30:07+00:00" }, { "id": "01a0c573-1e50-7363-a9ac-db237f28f008", "title": "Privilege escalation in Windows Domains (3/3)", "url": "https://blog.compass-security.com/2019/08/privilege-escalation-in-windows-domains-3-3/", "published_at": "2019-08-26T04:30:42+00:00" }, { "id": "01a0c573-1e50-7363-a9ac-db237f467cdd", "title": "Privilege escalation in Windows Domains (2/3)", "url": "https://blog.compass-security.com/2019/08/privilege-escalation-in-windows-domains-2-3/", "published_at": "2019-08-12T04:30:11+00:00" }, { "id": "01a0c573-1e50-7363-a9ac-db23804024ce", "title": "Privilege escalation in Windows Domains (1/3)", "url": "https://blog.compass-security.com/2019/07/privilege-escalation-in-windows-domains-1-3/", "published_at": "2019-07-29T04:30:20+00:00" }, { "id": "01a0c573-1e50-7363-a9ac-db2380f2d812", "title": "From Open Wi-Fi to WPA3", "url": "https://blog.compass-security.com/2019/07/from-open-wi-fi-to-wpa3/", "published_at": "2019-07-15T04:30:21+00:00" }, { "id": "01a0c573-1e50-7363-a9ac-db2381087cdb", "title": "Practical OpenID Connect Pentesting", "url": "https://blog.compass-security.com/2019/07/practical-openid-connect-pentesting/", "published_at": "2019-07-01T07:30:45+00:00" }, { "id": "01a0c573-1e50-7363-a9ac-db2381b6efd6", "title": "Reversing obfuscated passwords", "url": "https://blog.compass-security.com/2019/05/reversing-obfuscated-passwords/", "published_at": "2019-05-23T04:27:25+00:00" }, { "id": "01a0c573-1e50-7363-a9ac-db2381dfe0e7", "title": "Swiss QR Code Invoices for Phun and Profit", "url": "https://blog.compass-security.com/2019/05/swiss-qr-code-invoices-for-phun-and-profit/", "published_at": "2019-05-16T07:03:01+00:00" }, { "id": "01a0c580-fdc8-72c9-83d7-1c3ec8c75142", "title": "On Raising Awareness to Social Engineering Attack", "url": "https://blog.compass-security.com/2019/04/on-raising-awareness-to-social-engineering-attack/", "published_at": "2019-04-29T06:11:08+00:00" }, { "id": "01a0c580-fdc8-72c9-83d7-1c3ec9aa2483", "title": "Investigating Data Leakage via External Storage Devices", "url": "https://blog.compass-security.com/2019/04/investigating-data-leakage-via-external-storage-devices/", "published_at": "2019-04-26T05:51:47+00:00" }, { "id": "01a0c580-fdc8-72c9-83d7-1c3ec9cec9b3", "title": "Windows Forensics with Plaso", "url": "https://blog.compass-security.com/2019/03/windows-forensics-with-plaso/", "published_at": "2019-03-25T06:58:43+00:00" }, { "id": "01a0c580-fdc8-72c9-83d7-1c3eca4e7e7a", "title": "XSS worm – A creative use of web application vulnerability", "url": "https://blog.compass-security.com/2018/12/xss-worm-a-creative-use-of-web-application-vulnerability/", "published_at": "2018-12-21T15:57:40+00:00" }, { "id": "01a0c580-fdc8-72c9-83d7-1c3ecadbc173", "title": "Substitutable Message Service", "url": "https://blog.compass-security.com/2018/10/substitutable-message-service/", "published_at": "2018-10-26T07:46:33+00:00" }, { "id": "01a0c580-fdc8-72c9-83d7-1c3ecae7722c", "title": "Hidden Inbox Rules in Microsoft Exchange", "url": "https://blog.compass-security.com/2018/09/hidden-inbox-rules-in-microsoft-exchange/", "published_at": "2018-09-17T06:27:38+00:00" }, { "id": "01a0c580-fdc8-72c9-83d7-1c3ecb45365b", "title": "Area41 2018 Wrap Up", "url": "https://blog.compass-security.com/2018/06/area41-2018-wrap-up/", "published_at": "2018-06-18T13:46:45+00:00" }, { "id": "01a0c580-fdc8-72c9-83d7-1c3ecbfa559f", "title": "Compass at Area41 2018", "url": "https://blog.compass-security.com/2018/05/compass-at-area41-2018/", "published_at": "2018-05-18T11:35:23+00:00" }, { "id": "01a0c580-fdc8-72c9-83d7-1c3eccdcdcee", "title": "Insomni’hack 2018 Wrap-Up", "url": "https://blog.compass-security.com/2018/03/insomnihack-2018-wrap-up/", "published_at": "2018-03-27T09:47:26+00:00" }, { "id": "01a0c580-fdc8-72c9-83d7-1c3ecd3146bc", "title": "Insomni’hack 2018 – guessflag", "url": "https://blog.compass-security.com/2018/03/insomnihack-2018-guessflag/", "published_at": "2018-03-27T09:20:17+00:00" }, { "id": "01a0c58e-cff3-7084-9ec3-5a2bf016342f", "title": "Insomni’hack 2018 – vba02-bitminer", "url": "https://blog.compass-security.com/2018/03/insomnihack-2018-vba02-bitminer/", "published_at": "2018-03-26T09:26:49+00:00" }, { "id": "01a0c58e-cff3-7084-9ec3-5a2bf0d96f1d", "title": "Insomni’hack 2018 – vba01-baby", "url": "https://blog.compass-security.com/2018/03/insomnihack-2018-vba01-baby/", "published_at": "2018-03-26T09:25:09+00:00" }, { "id": "01a0c58e-cff3-7084-9ec3-5a2bf162f68f", "title": "Insomni’hack 2018 – vbaby", "url": "https://blog.compass-security.com/2018/03/insomnihack-2018-vbaby/", "published_at": "2018-03-26T09:24:10+00:00" }, { "id": "01a0c58e-cff3-7084-9ec3-5a2bf1a06cbc", "title": "Insomni’hack 2018 – Authentication Service", "url": "https://blog.compass-security.com/2018/03/insomnihack-2018-authentication-service/", "published_at": "2018-03-26T09:20:33+00:00" }, { "id": "01a0c58e-cff3-7084-9ec3-5a2bf28ff136", "title": "Insomni’hack 2018 – PHuck", "url": "https://blog.compass-security.com/2018/03/insomnihack-2018-phuck/", "published_at": "2018-03-26T09:16:56+00:00" }, { "id": "01a0c58e-cff3-7084-9ec3-5a2bf36b14ad", "title": "Insomni’hack 2018 – Conference", "url": "https://blog.compass-security.com/2018/03/insomnihack-2018-conferences/", "published_at": "2018-03-26T09:06:50+00:00" }, { "id": "01a0c58e-cff3-7084-9ec3-5a2bf45680e1", "title": "No need to break in, use the backdoor", "url": "https://blog.compass-security.com/2018/02/no-need-to-break-in-use-the-backdoor/", "published_at": "2018-02-23T07:17:13+00:00" }, { "id": "01a0c58e-cff3-7084-9ec3-5a2bf4ef92f4", "title": "How to lose money with cryptocurrencies", "url": "https://blog.compass-security.com/2018/01/how-to-lose-money-with-cryptocurrencies/", "published_at": "2018-01-16T08:49:03+00:00" }, { "id": "01a0c58e-cff3-7084-9ec3-5a2bf513d323", "title": "Write-up: BlackAlps Y-NOT-CTF", "url": "https://blog.compass-security.com/2017/11/write-up-blackalps-y-not-ctf/", "published_at": "2017-11-17T16:44:43+00:00" }, { "id": "01a0c58e-cff3-7084-9ec3-5a2bf52d7649", "title": "Hardwear.io 2017", "url": "https://blog.compass-security.com/2017/09/hardwear-io-2017/", "published_at": "2017-09-18T12:16:49+00:00" } ] posts Claim your blog

Back to Compass Security

Blog · corpus.blog/blogs/compass-security.com/posts

Compass Security

compass-security.com

2021

The Good Old DNS Rebinding original ↗

23 Feb 2021

.CH Zone Lookup Tool original ↗

7 Jan 2021

2020

The “Volatility Triage App” for Splunk original ↗

24 Nov 2020

Evading Static Machine Learning Malware Detection Models – Part 2: The Gray-Box Approach original ↗

10 Nov 2020

Burp Extension: Copy Request & Response original ↗

28 Oct 2020

Evading Static Machine Learning Malware Detection Models – Part 1: The Black-Box Approach original ↗

6 Oct 2020

101 for lateral movement detection original ↗

1 Sept 2020

Make the most out of BloodHound original ↗

30 Jul 2020

Yet Another Froala 0-Day XSS original ↗

3 Jul 2020

Relaying NTLM authentication over RPC original ↗

14 May 2020

Reversing a .NET Orcus dropper original ↗

14 Apr 2020

New SMBGhost Vulnerability Affects Modern Windows Systems original ↗

13 Mar 2020

Domain-Join Computers the Proper Way original ↗

11 Mar 2020

Invoice Fraud with Everything the Bag of Tricks Has to Offer original ↗

25 Feb 2020

OWASP – Toronto January 2020 original ↗

10 Feb 2020

Interview with Jim McKay original ↗

29 Jan 2020

2019

Finding Active Directory attack paths using BloodHound original ↗

9 Dec 2019

Challenging Your Forensic Readiness with an Application-Level Ransomware Attack original ↗

25 Nov 2019

Hacking Tools Cheat Sheet original ↗

28 Oct 2019

Introducing Web Vulnerabilities into Native Apps original ↗

21 Oct 2019

There is such thing as a free lunch original ↗

8 Oct 2019

A Smart Card Odyssey original ↗

23 Sept 2019

enOcean Security original ↗

12 Sept 2019

Privilege escalation in Windows Domains (3/3)original ↗

26 Aug 2019

Privilege escalation in Windows Domains (2/3)original ↗

12 Aug 2019

Privilege escalation in Windows Domains (1/3)original ↗

29 Jul 2019

From Open Wi-Fi to WPA3 original ↗

15 Jul 2019

Practical OpenID Connect Pentesting original ↗

1 Jul 2019

Reversing obfuscated passwords original ↗

23 May 2019

Swiss QR Code Invoices for Phun and Profit original ↗

16 May 2019

On Raising Awareness to Social Engineering Attack original ↗

29 Apr 2019

Investigating Data Leakage via External Storage Devices original ↗

26 Apr 2019

Windows Forensics with Plaso original ↗

25 Mar 2019

2018

XSS worm – A creative use of web application vulnerability original ↗

21 Dec 2018

Substitutable Message Service original ↗

26 Oct 2018

Hidden Inbox Rules in Microsoft Exchange original ↗

17 Sept 2018

Area41 2018 Wrap Up original ↗

18 Jun 2018

Compass at Area41 2018 original ↗

18 May 2018

Insomni’hack 2018 Wrap-Up original ↗

27 Mar 2018

Insomni’hack 2018 – guessflag original ↗

27 Mar 2018

Insomni’hack 2018 – vba02-bitminer original ↗

26 Mar 2018

Insomni’hack 2018 – vba01-baby original ↗

26 Mar 2018

Insomni’hack 2018 – vbaby original ↗

26 Mar 2018

Insomni’hack 2018 – Authentication Service original ↗

26 Mar 2018

Insomni’hack 2018 – PHuck original ↗

26 Mar 2018

Insomni’hack 2018 – Conference original ↗

26 Mar 2018

No need to break in, use the backdoor original ↗

23 Feb 2018

How to lose money with cryptocurrencies original ↗

16 Jan 2018

2017

Write-up: BlackAlps Y-NOT-CTF original ↗

17 Nov 2017

Hardwear.io 2017 original ↗

18 Sept 2017