Public curated feed for visitors
Active view
12 of 12 entries
Craig S. Blackie (MDSec) and Darren McDonald (AmberWolf) | 10 July 2026 A joint discovery, published in parallel on the AmberWolf and MDSec blogs. Summary Dell stores its BIOS administrator... The post Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639) appeared first on MDSec.
28/05/2026 Introduction A few years ago we looked at how Visual Studio Code extensions could be used for initial access in red team engagements; at the time, the results were... The post Visual Studio Extensions Revisited appeared first on MDSec.
Overview This post explores how modifying a Dell UEFI firmware image at the flash level can fundamentally undermine platform security without leaving visible traces in the firmware interface. By directly... The post Disabling Security Features in a Locked BIOS appeared first on MDSec.
13th March 2026 As part of MDSec’s R&D work, we often discover vulnerabilities and develop exploits to support our red team engagements. When researching widely used software, it is often... The post RIP RegPwn appeared first on MDSec.
27th February 2026 The MDSec red team are regularly performing research to identify privilege escalation vectors in Windows and macOS for use during red team engagements. Where the indicators in... The post Total Recall – Retracing Your Steps Back to NT AUTHORITY\SYSTEM appeared first on MDSec.
Introduction LLVM compiler infrastructure is powerful because of its modular design, flexibility, and rich intermediate representation (IR) that enables deep analysis and transformation of code. Unlike traditional compilers, LLVM separates... The post Function Peekaboo: Crafting self masking functions using LLVM appeared first on MDSec.
In recent months, a series of high-profile cyber attacks have hit the UK’s retail and automotive industries, targeting major companies like M&S, the Co-op, Harrods, and Jaguar Land Rover (JLR).... The post How Scattered Spider Exploited Weak Links in UK Retail Security appeared first on MDSec.
Introduction Over the course of numerous Red Team engagements MDSec has often gained privileged access to a target’s ServiceNow instance. This has, in turn, facilitated a variety of compromise actions... The post Red Teaming with ServiceNow appeared first on MDSec.
Introduction On a recent Red Team for a particularly hardened client, we were looking to escalate our privileges in order to move off the endpoint and pivot into the server... The post Extracting Account Connectivity Credentials (ACCs) from Symantec Management Agent (aka Altiris) appeared first on MDSec.
Introduction Nov 29, 2024 Nighthawk C2 – This post is cross posted to the Nighthawk blog. Nighthawk 0.3.3; Evanesco, unveils our latest research. “Evanesco” is a Latin term that means “I... The post Nighthawk 0.3.3 – Evanesco appeared first on MDSec.
Following on from our blog post in September, Finding Dora. DORA sets a new standard for how financial institutions and service providers within the EU should handle their digital operations.... The post From Panic to Prepared: How To Become DORA Compliant appeared first on MDSec.
Web Application Firewalls (WAFs) help to protect web applications by monitoring, filtering, and blocking HTTP traffic to and from a web service. However, WAFs are too often relied upon as... The post When WAFs Go Awry: Common Detection & Evasion Techniques for Web Application Firewalls appeared first on MDSec.