Labs

  1. ToolShell Zero-Day lets attackers run code on SharePoint servers

    August 4, 2025

    New SharePoint Zero-Day Allows Unauthenticated Remote Code Execution

    Read more arrow_right_alt

  2. Sudo “chwoot” 1.9.17 - Local Privilege Escalation

    July 16, 2025

    Sudo “chwoot” 1.9.17 – Local Privilege Escalation

    Read more arrow_right_alt

  3. Blocking device code flow authentication in Microsoft Entra ID

    April 15, 2025

    Blocking Device Code Flow in Microsoft Entra ID

    Read more arrow_right_alt

  4. Password cracking: How to crack a password

    April 9, 2024

    An introduction to password security: How to crack a password

    Read more arrow_right_alt

  5. Application Security 101: HTTP Headers explained

    June 27, 2023

    Application Security 101 – HTTP Headers Information Disclosure

    Read more arrow_right_alt

  6. SPF, DKIM, DMARC and BIMI for Email Security

    October 24, 2022

    SPF, DKIM, DMARC and BIMI for Email Security

    Read more arrow_right_alt

  7. Terraform security best practices

    July 19, 2022

    Terraform security best practices (2022)

    Read more arrow_right_alt

  8. Security vulnerability in Follina exploit

    June 8, 2022

    Preventing exploitation of the Follina vulnerability in MSDT

    Read more arrow_right_alt

  9. Application Security 101 – HTTP headers

    January 20, 2022

    Application Security 101 – HTTP headers

    Read more arrow_right_alt