Engineering WCF Hacks There aren’t too many professions in IT that makes professionals learn so many differe... 2024-10-27 14:0:0 | 阅读: 0 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu nmf proxy nbfx wcf python

Technical Details of CVE-2023-30988 - IBM Facsimile Support Privilege Escalation Have you ever s... 2023-8-22 14:37:0 | 阅读: 7 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu qautprof qffstrfcpp facsimile qfax

Technical Details of CVE-2023-30990 - Unauthenticated RCE in IBM i DDM Service IBM published a security bulletin called IBM i is vulnerable to an attacker executin... 2023-7-3 14:37:0 | 阅读: 6 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu ddm client quser security

Booby Trapping IBM i Post-exploitation is a crucial element of any attack aiming for realistic objectives,... 2023-3-30 19:37:0 | 阅读: 1 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu ofile pgm usrprf qcmd database

Abusing Adopted Authority on IBM i In our first blog... 2023-1-20 21:0:0 | 阅读: 2 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu library pgm userb1 save1 usera1

Our new scanner for Text4Shell Some say, CVE-202... 2022-10-19 03:27:38 | 阅读: 2 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu log4shell github burp rapid7

Another Tale of IBM i (AS/400) Hacking Our next journey takes us into the infrastructure of a bank. One element of the infras... 2022-9-28 21:42:24 | 阅读: 1 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu pase 5250 security database attn

Simple IBM i (AS/400) hacking When you get the chance to take a look at the IT systems of financial institutions, te... 2022-9-5 19:36:23 | 阅读: 1 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu security allobj tn5250 privileges ddm

Our new tool for enumerating hidden Log4Shell-affected hosts Log4Shell, formal... 2021-12-13 04:19:44 | 阅读: 6 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu username log4shell identify

Fuzzy Snapshots of Firefox IPC In January Mozilla published a post on their Attack & Defense blog about Effectively F... 2021-10-14 17:19:36 | 阅读: 0 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu kf memory serialized crash

Adding XCOFF Support to Ghidra with Kaitai Struct It’s not a secret that we at Silent Signal are hopeless romantics, especially when it... 2021-4-6 23:3:23 | 阅读: 2 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu ghidra xcoff kaitai loader aix

Abusing JWT public keys without the public key This blog post is dedicated to those to brave souls that dare to roll their own crypto... 2021-2-8 16:21:55 | 阅读: 4 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu pkcs security ordering library gcd

Unexpected Deserialization pt.1 - JMS On a recent engagement our task was to assess the security of a service built on IBM I... 2020-8-17 20:0:13 | 阅读: 4 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu jms client mq getbody ocular

Tips and scripts for reconnaissance and scanning Silent Signal Professional Ethical Hacking Services ... 2020-5-20 19:49:1 | 阅读: 0 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu ethical

Decrypting and analyzing HTTPS traffic without MITM Sniffing plaintext network traffic between apps and their backend APIs is an important... 2020-5-4 16:29:29 | 阅读: 3 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu burp network client pdml decrypted

Uninitialized Memory Disclosures in Web Applications While we at Silen... 2020-4-20 17:1:30 | 阅读: 1 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu memory disclosures papers chris

Unix-style approach to web application testing SANS Institute ac... 2020-3-27 17:11:28 | 阅读: 2 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu gold piper internals throwaway

Wide open banking: PSD2 and us With the advent o... 2020-1-27 16:0:27 | 阅读: 3 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu security tampering workings resending

Patching Android apps: what could possibly go wrong Many tools are timeless: a quality screwdriver will work in ten years just as fine as... 2019-10-21 22:13:46 | 阅读: 0 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu apk 9824 objection python3 apktool

Evading Cisco AnyConnect blocking LAN connections Some VPNs allow split tunneling, however, Cisco AnyConnect and many other solutions of... 2019-7-2 18:56:21 | 阅读: 6 | 收藏 | Silent Signal Techblog - blog.silentsignal.eu sslh ssh client 19158 apart