corpus.blog
56,966 blogs · [ { "id": "01a07df5-21bb-71db-812f-ba08772b08e1", "title": "Hack-From-Home Challenge Walk Through", "url": "https://sensepost.com/blog/2020/hack-from-home-challenge-walk-through/", "published_at": "2020-04-24T08:34:32+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba0877c0e2e1", "title": "Masquerading Windows processes like a DoubleAgent.", "url": "https://sensepost.com/blog/2020/masquerading-windows-processes-like-a-doubleagent./", "published_at": "2020-04-23T15:20:16+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba0877e70b1e", "title": "Attacking smart cards in active directory", "url": "https://sensepost.com/blog/2020/attacking-smart-cards-in-active-directory/", "published_at": "2020-03-26T13:56:02+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba0878afefd6", "title": "Chaining multiple techniques and tools for domain takeover using RBCD", "url": "https://sensepost.com/blog/2020/chaining-multiple-techniques-and-tools-for-domain-takeover-using-rbcd/", "published_at": "2020-03-09T14:45:17+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba08792c0623", "title": "Intro to Chrome’s V8 from an exploit development angle", "url": "https://sensepost.com/blog/2020/intro-to-chromes-v8-from-an-exploit-development-angle/", "published_at": "2020-02-28T11:37:00+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba0879ee4ac0", "title": "[Dual-Pod-Shock] Emotional abuse of a DualShock", "url": "https://sensepost.com/blog/2020/dual-pod-shock-emotional-abuse-of-a-dualshock/", "published_at": "2020-01-24T10:42:51+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba087a8fd2a1", "title": "Bypassing access control in BMC Control-D Report Viewer", "url": "https://sensepost.com/blog/2019/bypassing-access-control-in-bmc-control-d-report-viewer/", "published_at": "2019-12-03T10:00:00+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba087b8409c5", "title": "Obtaining shells via Logitech Unifying Dongles", "url": "https://sensepost.com/blog/2019/obtaining-shells-via-logitech-unifying-dongles/", "published_at": "2019-12-02T11:14:21+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba087ba51f02", "title": "Hacking doom for fun, health and ammo", "url": "https://sensepost.com/blog/2019/hacking-doom-for-fun-health-and-ammo/", "published_at": "2019-11-27T19:12:00+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba087bc5e4c5", "title": "The power of variant analysis (Semmle QL) CVE-2019-15937 and CVE-2019-15938", "url": "https://sensepost.com/blog/2019/the-power-of-variant-analysis-semmle-ql-cve-2019-15937-and-cve-2019-15938/", "published_at": "2019-10-28T17:24:08+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba087bfb7caf", "title": "mettle your ios with frida", "url": "https://sensepost.com/blog/2019/mettle-your-ios-with-frida/", "published_at": "2019-10-01T08:10:03+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba087cc874c4", "title": "PEAP Relay Attacks with wpa_sycophant", "url": "https://sensepost.com/blog/2019/peap-relay-attacks-with-wpa_sycophant/", "published_at": "2019-06-25T13:59:31+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba087d3128fe", "title": "Analysis of a 1day (CVE-2019-0547) and discovery of a forgotten condition in the patch (CVE-2019-0726) – Part 1 of 2", "url": "https://sensepost.com/blog/2019/analysis-of-a-1day-cve-2019-0547-and-discovery-of-a-forgotten-condition-in-the-patch-cve-2019-0726-part-1-of-2/", "published_at": "2019-05-02T06:49:56+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba087e005b94", "title": "recreating known universal windows password backdoors with Frida", "url": "https://sensepost.com/blog/2019/recreating-known-universal-windows-password-backdoors-with-frida/", "published_at": "2019-04-23T07:27:14+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba087e05978a", "title": "Understanding PEAP In-Depth", "url": "https://sensepost.com/blog/2019/understanding-peap-in-depth/", "published_at": "2019-04-18T07:33:44+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba087ead0717", "title": "Being Stubborn Pays Off pt. 1 – CVE-2018-19204", "url": "https://sensepost.com/blog/2019/being-stubborn-pays-off-pt.-1-cve-2018-19204/", "published_at": "2019-04-18T07:00:30+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba087ef865e5", "title": "Introduction to WebAssembly", "url": "https://sensepost.com/blog/2018/introduction-to-webassembly/", "published_at": "2018-11-14T15:06:24+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba087f7f3929", "title": "(Re)Evaluating Qubes OS as a pentesting platform", "url": "https://sensepost.com/blog/2018/reevaluating-qubes-os-as-a-pentesting-platform/", "published_at": "2018-10-24T12:23:40+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba08800451ca", "title": "Waiting for goDoH", "url": "https://sensepost.com/blog/2018/waiting-for-godoh/", "published_at": "2018-10-24T07:31:59+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba0880f76d11", "title": "Mallet in the Middle", "url": "https://sensepost.com/blog/2018/mallet-in-the-middle/", "published_at": "2018-10-10T09:45:31+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba0881c7933d", "title": "Linux Heap Exploitation Intro Series: Set you free() – part 2", "url": "https://sensepost.com/blog/2018/linux-heap-exploitation-intro-series-set-you-free-part-2/", "published_at": "2018-09-06T08:29:15+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba0882082808", "title": "Efficient HTTP Scripting in the Shell", "url": "https://sensepost.com/blog/2018/efficient-http-scripting-in-the-shell/", "published_at": "2018-09-05T11:48:22+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba0882537db2", "title": "punching messages in the q", "url": "https://sensepost.com/blog/2018/punching-messages-in-the-q/", "published_at": "2018-06-08T13:40:54+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba0882628ea0", "title": "Mallet, a framework for creating proxies", "url": "https://sensepost.com/blog/2018/mallet-a-framework-for-creating-proxies/", "published_at": "2018-06-08T09:27:25+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba0882c1fb8c", "title": "Decoding RF Protocols Within GRC", "url": "https://sensepost.com/blog/2018/decoding-rf-protocols-within-grc/", "published_at": "2018-06-06T14:26:59+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba0883a0d8cf", "title": "A new look at null sessions and user enumeration", "url": "https://sensepost.com/blog/2018/a-new-look-at-null-sessions-and-user-enumeration/", "published_at": "2018-05-11T19:11:20+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba0883a18627", "title": "Cracking Efficiency Measurements & Common Substring Attack", "url": "https://sensepost.com/blog/2018/cracking-efficiency-measurements-common-substring-attack/", "published_at": "2018-04-19T11:31:04+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba08843cd015", "title": "Linux Heap Exploitation Intro Series: Set you free() – part 1", "url": "https://sensepost.com/blog/2018/linux-heap-exploitation-intro-series-set-you-free-part-1/", "published_at": "2018-03-15T09:20:10+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba0884f12433", "title": "tip toeing past android 7’s network security configuration", "url": "https://sensepost.com/blog/2018/tip-toeing-past-android-7s-network-security-configuration/", "published_at": "2018-03-12T18:12:07+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba088501e4c4", "title": "Fixing up Net-Creds", "url": "https://sensepost.com/blog/2018/fixing-up-net-creds/", "published_at": "2018-02-20T15:04:59+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba088594e686", "title": "5 Min Security: Popular Phishing Techniques in 2017/2018", "url": "https://sensepost.com/blog/2018/5-min-security-popular-phishing-techniques-in-2017/2018/", "published_at": "2018-01-25T09:37:48+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba0886532bec", "title": "Linux Heap Exploitation Intro Series: Riding free on the heap – Double free attacks!", "url": "https://sensepost.com/blog/2017/linux-heap-exploitation-intro-series-riding-free-on-the-heap-double-free-attacks/", "published_at": "2017-12-22T07:00:23+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba088677c67e", "title": "building the bsidescpt17 rfchallenge", "url": "https://sensepost.com/blog/2017/building-the-bsidescpt17-rfchallenge/", "published_at": "2017-12-13T11:14:48+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba0886ca53cd", "title": "gowitness – a new tool for an old idea", "url": "https://sensepost.com/blog/2017/gowitness-a-new-tool-for-an-old-idea/", "published_at": "2017-11-27T10:45:00+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba0886ec6135", "title": "A distinguisher for SHA256 using Bitcoin (mining faster along the way)", "url": "https://sensepost.com/blog/2017/a-distinguisher-for-sha256-using-bitcoin-mining-faster-along-the-way/", "published_at": "2017-10-16T12:50:42+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba0887545d70", "title": "Outlook Home Page – Another Ruler Vector", "url": "https://sensepost.com/blog/2017/outlook-home-page-another-ruler-vector/", "published_at": "2017-10-11T07:34:14+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba088795f8e0", "title": "Macro-less Code Exec in MSWord", "url": "https://sensepost.com/blog/2017/macro-less-code-exec-in-msword/", "published_at": "2017-10-09T14:02:13+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba08886cfb21", "title": "Recreating certificates using Apostille", "url": "https://sensepost.com/blog/2017/recreating-certificates-using-apostille/", "published_at": "2017-10-06T05:27:29+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba0888f95694", "title": "NotRuler – Turning Offence into Defence", "url": "https://sensepost.com/blog/2017/notruler-turning-offence-into-defence/", "published_at": "2017-10-02T08:26:00+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba088915bf98", "title": "Linux Heap Exploitation Intro Series: The magicians cape – 1 Byte Overflow", "url": "https://sensepost.com/blog/2017/linux-heap-exploitation-intro-series-the-magicians-cape-1-byte-overflow/", "published_at": "2017-09-20T13:27:18+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba0889530557", "title": "DEEP INSERT – Card Skimmer Research", "url": "https://sensepost.com/blog/2017/deep-insert-card-skimmer-research/", "published_at": "2017-08-02T10:27:18+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba0889fb3268", "title": "Abusing GDI Objects for ring0 Primitives Revolution", "url": "https://sensepost.com/blog/2017/abusing-gdi-objects-for-ring0-primitives-revolution/", "published_at": "2017-07-29T14:41:50+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba088a2e3742", "title": "Linux Heap Exploitation Intro Series: Used and Abused – Use After Free", "url": "https://sensepost.com/blog/2017/linux-heap-exploitation-intro-series-used-and-abused-use-after-free/", "published_at": "2017-07-28T15:27:30+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba088a7214cc", "title": "A new colour scheme", "url": "https://sensepost.com/blog/2017/a-new-colour-scheme/", "published_at": "2017-07-28T09:37:32+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba088b0181f7", "title": "objection – mobile runtime exploration", "url": "https://sensepost.com/blog/2017/objection-mobile-runtime-exploration/", "published_at": "2017-07-11T12:39:55+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba088b79e450", "title": "SensePost at BlackHat & Defcon 2017", "url": "https://sensepost.com/blog/2017/sensepost-at-blackhat-defcon-2017/", "published_at": "2017-06-26T11:05:08+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba088be40fd7", "title": "Fuzzing Apache httpd server with American Fuzzy Lop + persistent mode", "url": "https://sensepost.com/blog/2017/fuzzing-apache-httpd-server-with-american-fuzzy-lop--persistent-mode/", "published_at": "2017-06-20T12:41:36+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba088c5ac66d", "title": "Linux Heap Exploitation Intro Series – (BONUS) printf might be leaking!", "url": "https://sensepost.com/blog/2017/linux-heap-exploitation-intro-series-bonus-printf-might-be-leaking/", "published_at": "2017-06-19T13:14:59+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba088cc0f75c", "title": "Pentesting Enterprise Infrastructure – Journeyman Level", "url": "https://sensepost.com/blog/2017/pentesting-enterprise-infrastructure-journeyman-level/", "published_at": "2017-06-14T14:56:24+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba088d4e22e3", "title": "Womens Training Scholarship", "url": "https://sensepost.com/blog/2017/womens-training-scholarship/", "published_at": "2017-05-25T06:06:51+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba088e2bd0e1", "title": "Sending AM-OOK using Metasploit and rftransceiver", "url": "https://sensepost.com/blog/2017/sending-am-ook-using-metasploit-and-rftransceiver/", "published_at": "2017-05-12T06:38:59+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba088eb87894", "title": "Painless intro to the Linux userland heap", "url": "https://sensepost.com/blog/2017/painless-intro-to-the-linux-userland-heap/", "published_at": "2017-05-05T08:47:37+00:00" }, { "id": "01a07df5-21bb-71db-812f-ba088ec47342", "title": "Outlook Forms and Shells", "url": "https://sensepost.com/blog/2017/outlook-forms-and-shells/", "published_at": "2017-04-28T15:18:09+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc09d1113cf", "title": "The TRITON Won’t Protect You From Our Punches", "url": "https://sensepost.com/blog/2017/the-triton-wont-protect-you-from-our-punches/", "published_at": "2017-04-06T08:58:16+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc09d611939", "title": "Liniaal – Empire through Exchange", "url": "https://sensepost.com/blog/2017/liniaal-empire-through-exchange/", "published_at": "2017-03-22T09:47:30+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc09db49a61", "title": "USaBUSe Linux updates", "url": "https://sensepost.com/blog/2017/usabuse-linux-updates/", "published_at": "2017-03-10T20:07:26+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc09e50a919", "title": "Pass the Hash with Ruler", "url": "https://sensepost.com/blog/2017/pass-the-hash-with-ruler/", "published_at": "2017-01-17T08:51:08+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc09ee146c3", "title": "Exploiting MS16-098 RGNOBJ Integer Overflow on Windows 8.1 x64 bit by abusing GDI objects", "url": "https://sensepost.com/blog/2017/exploiting-ms16-098-rgnobj-integer-overflow-on-windows-8.1-x64-bit-by-abusing-gdi-objects/", "published_at": "2017-01-03T12:55:58+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc09fb152d4", "title": "XRDP: Exploiting Unauthenticated X Windows Sessions", "url": "https://sensepost.com/blog/2016/xrdp-exploiting-unauthenticated-x-windows-sessions/", "published_at": "2016-12-08T13:21:31+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0a07d7d72", "title": "BSides Cape Town Secret Squirrel Challenge Write-Up", "url": "https://sensepost.com/blog/2016/bsides-cape-town-secret-squirrel-challenge-write-up/", "published_at": "2016-12-06T10:54:59+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0a0f90005", "title": "Rattler:Identifying and Exploiting DLL Preloading Vulnerabilities", "url": "https://sensepost.com/blog/2016/rattleridentifying-and-exploiting-dll-preloading-vulnerabilities/", "published_at": "2016-12-01T14:18:33+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0a1bc1329", "title": "Intercepting passwords with Empire and winning!", "url": "https://sensepost.com/blog/2016/intercepting-passwords-with-empire-and-winning/", "published_at": "2016-11-18T08:50:59+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0a1caeafb", "title": "Kwetza: Infecting Android Applications", "url": "https://sensepost.com/blog/2016/kwetza-infecting-android-applications/", "published_at": "2016-10-03T07:47:46+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0a1ea04a9", "title": "Snoopy with Mana", "url": "https://sensepost.com/blog/2016/snoopy-with-mana/", "published_at": "2016-09-14T10:11:27+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0a2395b8f", "title": "What to look for in a training provider", "url": "https://sensepost.com/blog/2016/what-to-look-for-in-a-training-provider/", "published_at": "2016-09-05T12:53:58+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0a29c8d2c", "title": "MAPI over HTTP and Mailrule Pwnage", "url": "https://sensepost.com/blog/2016/mapi-over-http-and-mailrule-pwnage/", "published_at": "2016-09-01T08:30:22+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0a36d16ca", "title": "Universal Serial aBUSe", "url": "https://sensepost.com/blog/2016/universal-serial-abuse/", "published_at": "2016-08-15T15:02:29+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0a39b43d6", "title": "SensePost at Blackhat & Defcon 2016", "url": "https://sensepost.com/blog/2016/sensepost-at-blackhat-defcon-2016/", "published_at": "2016-06-21T14:24:30+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0a3e5accb", "title": "PwnBank en route to Vegas", "url": "https://sensepost.com/blog/2016/pwnbank-en-route-to-vegas/", "published_at": "2016-06-20T16:17:29+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0a4aefa94", "title": "PowerShell, C-Sharp and DDE The Power Within", "url": "https://sensepost.com/blog/2016/powershell-c-sharp-and-dde-the-power-within/", "published_at": "2016-05-20T13:27:49+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0a5631638", "title": "Handling Randomised MAC Addresses in MANA", "url": "https://sensepost.com/blog/2016/handling-randomised-mac-addresses-in-mana/", "published_at": "2016-05-20T08:44:48+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0a5889170", "title": "Where SensePost meets the real world", "url": "https://sensepost.com/blog/2016/where-sensepost-meets-the-real-world/", "published_at": "2016-05-09T11:49:50+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0a65df419", "title": "Not-quite-triangulation using the who’s near me feature in location-aware web apps", "url": "https://sensepost.com/blog/2016/not-quite-triangulation-using-the-whos-near-me-feature-in-location-aware-web-apps/", "published_at": "2016-03-27T11:47:12+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0a6eb66ed", "title": "Too Easy – Adding Root CA’s to iOS Devices", "url": "https://sensepost.com/blog/2016/too-easy-adding-root-cas-to-ios-devices/", "published_at": "2016-03-23T15:52:28+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0a7426670", "title": "DET – (extensible) Data Exfiltration Toolkit", "url": "https://sensepost.com/blog/2016/det-extensible-data-exfiltration-toolkit/", "published_at": "2016-03-19T09:59:53+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0a7c4260a", "title": "Advanced Cycript and Substrate", "url": "https://sensepost.com/blog/2016/advanced-cycript-and-substrate/", "published_at": "2016-03-18T07:01:49+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0a849674b", "title": "Android hooking with Introspy", "url": "https://sensepost.com/blog/2016/android-hooking-with-introspy/", "published_at": "2016-03-10T12:32:07+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0a8a66971", "title": "Understanding Locky", "url": "https://sensepost.com/blog/2016/understanding-locky/", "published_at": "2016-02-19T18:58:46+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0a8d94456", "title": "Bringing the hashes home with reGeorg & Empire", "url": "https://sensepost.com/blog/2016/bringing-the-hashes-home-with-regeorg-empire/", "published_at": "2016-02-11T10:51:33+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0a8f191a1", "title": "Sensepost Maltego Toolkit: Skyper", "url": "https://sensepost.com/blog/2016/sensepost-maltego-toolkit-skyper/", "published_at": "2016-01-11T14:47:48+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0a9a97469", "title": "(local) AutoResponder", "url": "https://sensepost.com/blog/2015/local-autoresponder/", "published_at": "2015-12-11T09:55:48+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0aaa86921", "title": "AutoDane at BSides Cape Town", "url": "https://sensepost.com/blog/2015/autodane-at-bsides-cape-town/", "published_at": "2015-12-07T13:43:27+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0ab645c6b", "title": "Into The Cloud", "url": "https://sensepost.com/blog/2015/into-the-cloud/", "published_at": "2015-11-25T08:59:09+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0abbaa220", "title": "Wadi Fuzzer", "url": "https://sensepost.com/blog/2015/wadi-fuzzer/", "published_at": "2015-10-23T07:10:40+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0ac6fb27c", "title": "Abusing File Converters", "url": "https://sensepost.com/blog/2015/abusing-file-converters/", "published_at": "2015-10-01T11:26:46+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0ad26b124", "title": "Hi Jack!", "url": "https://sensepost.com/blog/2015/hi-jack/", "published_at": "2015-09-08T08:15:11+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0ad6bee62", "title": "[Another] Intercepting Proxy", "url": "https://sensepost.com/blog/2015/another-intercepting-proxy/", "published_at": "2015-09-03T15:14:32+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0ad7b2701", "title": "WiFi De-authentication Rifle:", "url": "https://sensepost.com/blog/2015/wifi-de-authentication-rifle/", "published_at": "2015-07-13T10:53:00+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0addf7e76", "title": "Mobile Application Bootcamp – Journeyman Level – Black Hat Vegas 2015", "url": "https://sensepost.com/blog/2015/mobile-application-bootcamp-journeyman-level-black-hat-vegas-2015/", "published_at": "2015-06-12T13:51:29+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0ae9c2bf9", "title": "Running sslscan on 5k servers taken from Alexa’s top 10k", "url": "https://sensepost.com/blog/2015/running-sslscan-on-5k-servers-taken-from-alexas-top-10k/", "published_at": "2015-06-09T09:16:15+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0af6a7294", "title": "We need you to analyse the threats", "url": "https://sensepost.com/blog/2015/we-need-you-to-analyse-the-threats/", "published_at": "2015-05-05T09:41:15+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0af764d48", "title": "Maltego Webinar Series: Episode 01, Introduction", "url": "https://sensepost.com/blog/2015/maltego-webinar-series-episode-01-introduction/", "published_at": "2015-04-20T21:12:40+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0b01856f8", "title": "Lovely Pwnies – Twitter Monitor", "url": "https://sensepost.com/blog/2015/lovely-pwnies-twitter-monitor/", "published_at": "2015-04-10T12:40:13+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0b02fdf05", "title": "Break the Web at BlackHat Singapore", "url": "https://sensepost.com/blog/2015/break-the-web-at-blackhat-singapore/", "published_at": "2015-03-09T13:04:15+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0b03ed4f4", "title": "SensePost Training", "url": "https://sensepost.com/blog/2015/sensepost-training/", "published_at": "2015-03-04T11:20:29+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0b05c34c5", "title": "Improvements in Rogue AP attacks – MANA 1/2", "url": "https://sensepost.com/blog/2015/improvements-in-rogue-ap-attacks-mana-1/2/", "published_at": "2015-02-23T08:30:02+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0b128dfaf", "title": "Commercial Snoopy Launch! [ ShadowLightly ]", "url": "https://sensepost.com/blog/2015/commercial-snoopy-launch-shadowlightly/", "published_at": "2015-01-16T18:42:04+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0b1c52b5a", "title": "Demonstrating ClickJacking with Jack", "url": "https://sensepost.com/blog/2014/demonstrating-clickjacking-with-jack/", "published_at": "2014-09-15T09:51:25+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0b214113c", "title": "DefCon 22 – Practical Aerial Hacking & Surveillance", "url": "https://sensepost.com/blog/2014/defcon-22-practical-aerial-hacking-surveillance/", "published_at": "2014-08-10T02:07:47+00:00" }, { "id": "01a07df5-21bc-7137-817e-1fc0b2fbdb1e", "title": "SensePost partners with Paterva to offer improved security intelligence", "url": "https://sensepost.com/blog/2014/sensepost-partners-with-paterva-to-offer-improved-security-intelligence/", "published_at": "2014-08-04T21:24:13+00:00" } ] posts Claim your blog
Back to SensePost
Blog · corpus.blog/blogs/sensepost.com/posts

SensePost

sensepost.com

2020

Hack-From-Home Challenge Walk Throughoriginal ↗
24 Apr 2020
Masquerading Windows processes like a DoubleAgent.original ↗
23 Apr 2020
Attacking smart cards in active directoryoriginal ↗
26 Mar 2020
Chaining multiple techniques and tools for domain takeover using RBCDoriginal ↗
9 Mar 2020
Intro to Chrome’s V8 from an exploit development angleoriginal ↗
28 Feb 2020
[Dual-Pod-Shock] Emotional abuse of a DualShockoriginal ↗
24 Jan 2020

2019

Bypassing access control in BMC Control-D Report Vieweroriginal ↗
3 Dec 2019
Obtaining shells via Logitech Unifying Donglesoriginal ↗
2 Dec 2019
Hacking doom for fun, health and ammooriginal ↗
27 Nov 2019
The power of variant analysis (Semmle QL) CVE-2019-15937 and CVE-2019-15938original ↗
28 Oct 2019
mettle your ios with fridaoriginal ↗
1 Oct 2019
PEAP Relay Attacks with wpa_sycophantoriginal ↗
25 Jun 2019
Analysis of a 1day (CVE-2019-0547) and discovery of a forgotten condition in the patch (CVE-2019-0726) – Part 1 of 2original ↗
2 May 2019
recreating known universal windows password backdoors with Fridaoriginal ↗
23 Apr 2019
Understanding PEAP In-Depthoriginal ↗
18 Apr 2019
Being Stubborn Pays Off pt. 1 – CVE-2018-19204original ↗
18 Apr 2019

2018

Introduction to WebAssemblyoriginal ↗
14 Nov 2018
(Re)Evaluating Qubes OS as a pentesting platformoriginal ↗
24 Oct 2018
Waiting for goDoHoriginal ↗
24 Oct 2018
Mallet in the Middleoriginal ↗
10 Oct 2018
Linux Heap Exploitation Intro Series: Set you free() – part 2original ↗
6 Sept 2018
Efficient HTTP Scripting in the Shelloriginal ↗
5 Sept 2018
punching messages in the qoriginal ↗
8 Jun 2018
Mallet, a framework for creating proxiesoriginal ↗
8 Jun 2018
Decoding RF Protocols Within GRCoriginal ↗
6 Jun 2018
A new look at null sessions and user enumerationoriginal ↗
11 May 2018
Cracking Efficiency Measurements & Common Substring Attackoriginal ↗
19 Apr 2018
Linux Heap Exploitation Intro Series: Set you free() – part 1original ↗
15 Mar 2018
tip toeing past android 7’s network security configurationoriginal ↗
12 Mar 2018
Fixing up Net-Credsoriginal ↗
20 Feb 2018
5 Min Security: Popular Phishing Techniques in 2017/2018original ↗
25 Jan 2018

2017

Linux Heap Exploitation Intro Series: Riding free on the heap – Double free attacks!original ↗
22 Dec 2017
building the bsidescpt17 rfchallengeoriginal ↗
13 Dec 2017
gowitness – a new tool for an old ideaoriginal ↗
27 Nov 2017
A distinguisher for SHA256 using Bitcoin (mining faster along the way)original ↗
16 Oct 2017
Outlook Home Page – Another Ruler Vectororiginal ↗
11 Oct 2017
Macro-less Code Exec in MSWordoriginal ↗
9 Oct 2017
Recreating certificates using Apostilleoriginal ↗
6 Oct 2017
NotRuler – Turning Offence into Defenceoriginal ↗
2 Oct 2017
Linux Heap Exploitation Intro Series: The magicians cape – 1 Byte Overfloworiginal ↗
20 Sept 2017
DEEP INSERT – Card Skimmer Researchoriginal ↗
2 Aug 2017
Abusing GDI Objects for ring0 Primitives Revolutionoriginal ↗
29 Jul 2017
Linux Heap Exploitation Intro Series: Used and Abused – Use After Freeoriginal ↗
28 Jul 2017
A new colour schemeoriginal ↗
28 Jul 2017
objection – mobile runtime explorationoriginal ↗
11 Jul 2017
SensePost at BlackHat & Defcon 2017original ↗
26 Jun 2017
Fuzzing Apache httpd server with American Fuzzy Lop + persistent modeoriginal ↗
20 Jun 2017
Linux Heap Exploitation Intro Series – (BONUS) printf might be leaking!original ↗
19 Jun 2017
Pentesting Enterprise Infrastructure – Journeyman Leveloriginal ↗
14 Jun 2017
Womens Training Scholarshiporiginal ↗
25 May 2017
Sending AM-OOK using Metasploit and rftransceiveroriginal ↗
12 May 2017
Painless intro to the Linux userland heaporiginal ↗
5 May 2017
Outlook Forms and Shellsoriginal ↗
28 Apr 2017
The TRITON Won’t Protect You From Our Punchesoriginal ↗
6 Apr 2017
Liniaal – Empire through Exchangeoriginal ↗
22 Mar 2017
USaBUSe Linux updatesoriginal ↗
10 Mar 2017
Pass the Hash with Ruleroriginal ↗
17 Jan 2017
Exploiting MS16-098 RGNOBJ Integer Overflow on Windows 8.1 x64 bit by abusing GDI objectsoriginal ↗
3 Jan 2017

2016

XRDP: Exploiting Unauthenticated X Windows Sessionsoriginal ↗
8 Dec 2016
BSides Cape Town Secret Squirrel Challenge Write-Uporiginal ↗
6 Dec 2016
Rattler:Identifying and Exploiting DLL Preloading Vulnerabilitiesoriginal ↗
1 Dec 2016
Intercepting passwords with Empire and winning!original ↗
18 Nov 2016
Kwetza: Infecting Android Applicationsoriginal ↗
3 Oct 2016
Snoopy with Manaoriginal ↗
14 Sept 2016
What to look for in a training provideroriginal ↗
5 Sept 2016
MAPI over HTTP and Mailrule Pwnageoriginal ↗
1 Sept 2016
Universal Serial aBUSeoriginal ↗
15 Aug 2016
SensePost at Blackhat & Defcon 2016original ↗
21 Jun 2016
PwnBank en route to Vegasoriginal ↗
20 Jun 2016
PowerShell, C-Sharp and DDE The Power Withinoriginal ↗
20 May 2016
Handling Randomised MAC Addresses in MANAoriginal ↗
20 May 2016
Where SensePost meets the real worldoriginal ↗
9 May 2016
Not-quite-triangulation using the who’s near me feature in location-aware web appsoriginal ↗
27 Mar 2016
Too Easy – Adding Root CA’s to iOS Devicesoriginal ↗
23 Mar 2016
DET – (extensible) Data Exfiltration Toolkitoriginal ↗
19 Mar 2016
Advanced Cycript and Substrateoriginal ↗
18 Mar 2016
Android hooking with Introspyoriginal ↗
10 Mar 2016
Understanding Lockyoriginal ↗
19 Feb 2016
Bringing the hashes home with reGeorg & Empireoriginal ↗
11 Feb 2016
Sensepost Maltego Toolkit: Skyperoriginal ↗
11 Jan 2016

2015

(local) AutoResponderoriginal ↗
11 Dec 2015
AutoDane at BSides Cape Townoriginal ↗
7 Dec 2015
Into The Cloudoriginal ↗
25 Nov 2015
Wadi Fuzzeroriginal ↗
23 Oct 2015
Abusing File Convertersoriginal ↗
1 Oct 2015
Hi Jack!original ↗
8 Sept 2015
[Another] Intercepting Proxyoriginal ↗
3 Sept 2015
WiFi De-authentication Rifle:original ↗
13 Jul 2015
Mobile Application Bootcamp – Journeyman Level – Black Hat Vegas 2015original ↗
12 Jun 2015
Running sslscan on 5k servers taken from Alexa’s top 10koriginal ↗
9 Jun 2015
We need you to analyse the threatsoriginal ↗
5 May 2015
Maltego Webinar Series: Episode 01, Introductionoriginal ↗
20 Apr 2015
Lovely Pwnies – Twitter Monitororiginal ↗
10 Apr 2015
Break the Web at BlackHat Singaporeoriginal ↗
9 Mar 2015
SensePost Trainingoriginal ↗
4 Mar 2015
Improvements in Rogue AP attacks – MANA 1/2original ↗
23 Feb 2015
Commercial Snoopy Launch! [ ShadowLightly ]original ↗
16 Jan 2015

2014

Demonstrating ClickJacking with Jackoriginal ↗
15 Sept 2014
DefCon 22 – Practical Aerial Hacking & Surveillanceoriginal ↗
10 Aug 2014
SensePost partners with Paterva to offer improved security intelligenceoriginal ↗
4 Aug 2014
Previous Next