Blog posts

This blog post introduces a tool that extracts stolen credentials from text files coming in varying formats in order to address CTI and Red Teaming needs.

A pre-authentication remote code execution on Fortigate SSL VPN was discovered by Lexfo (CVE-2023-27997).

Some feedbacks on what we observed in Forensics with the Pre-auth RCE on Fortigate VPN (CVE-2023-27997) in our test environment.

Sshimpanzee, a reverse SSH tool with encapsulation feature.

This second part will focus on the 'jump' command in Cobalt Strike, used to establish a connection from a compromised system to the command and control (C2) server.

Cobalt Strike Investigation - Part 1

This article is a step-by-step guide to reverse an APK protected with DexGuard using Jadx

Avoslocker analysis