NOTICE

Some features on this website won't work without JavaScript such as theme toggle, search bar, and copy article.

Defense Demands Evolution

Latest Research

Plundering Postman with Porch Pirate
External
Discover how we responsibly disclosed active secrets to some of Canada's largest Internet Service Providers, and the Postman tooling we built along the way.
By Dominik Penner & Jake Bolam
November 1, 2023
Maltego XXE Analysis
External
Dominik Penner, discovered that Maltego versions 4.2.11 and below are vulnerable to XML external entity (XXE) injection via processing of MTZ (config) and MTGL (graph) files.
By Dominik Penner
August 27, 2020
The Year of Linux on the Desktop
Analysis of CVE-2019-14744, a command injection vulnerability discovered in KDE Frameworks' KConfig class affecting versions below 5.61.0.
By Dominik Penner
August 11, 2019
Axway SecureTransport 5.x XML Injection / XXE
Discovery and analysis of an unauthenticated blind XML injection and XXE vulnerability in Axway SecureTransport 5.0-5.3.
By Dominik Penner
July 21, 2019
Fun With Custom URI Schemes
Take a look into how custom URI schemes can be used to leverage underlying vulnerabilities in applications.
By Dominik Penner
May 22, 2019