CICADA8 – Medium

CICADA8

Hijack the TypeLib. New COM persistence technique

A new way of persistence on Windows systems via COM. Down with COM Hijacking, the future is TypeLib Hijacking! Read more here :)

Oct 22

Hijack the TypeLib. New COM persistence technique

Oct 22

Evil MSI. A long story about vulnerabilities in MSI Files

MSI Files are used ubiquitously in Windows. What vulnerabilities might they contain?

Aug 30

Evil MSI. A long story about vulnerabilities in MSI Files

Aug 30

OSEP Unleashed. The advance of in-memory payload execution

Everything OSEP didn’t tell you. How to execute payloads in memory and bypass antivirus.

Jul 27

OSEP Unleashed. The advance of in-memory payload execution

Jul 27

Process Injection is Dead. Long Live IHxHelpPaneServer

Process Injection without Process Injection. Exploring cross-session activation mechanisms to steal someone else’s session using COM

Jul 15

Process Injection is Dead. Long Live IHxHelpPaneServer

Jul 15

From HTTP to RCE. How to leave backdoor in IIS

I will show the way of persistence on a target system using legitimate Microsoft product being Internet Information Services.

Jul 3

From HTTP to RCE. How to leave backdoor in IIS

Jul 3

CICADA8

CICADA8

CICADA8 is a vulnerability management service with real-time cyber threat tracking capabilities. https://futurecrew.tech/cicada8

Help
Status
About
Careers
Press
Blog
Privacy
Terms
Text to speech
Teams