Hakai Offsec
@HakaiOffsec
Followers
508
Following
2
Media
30
Statuses
88
We discover security flaws that your team would never have thought of. https://t.co/1go7S1J6cm
Joined June 2023
After some hard work, coffee has been released! Our newest Rust COFF Loader!.If you want to check it out: Don’t forget to check our blog post for more details:.
2
29
54
👋 Hey everyone!. We just released a new technical report exposing two Remote Command Execution (RCE) vulnerabilities in Checkmk Enterprise Edition 2.4.0p2. These can be triggered through .mkp packages via the web interface. 🔍 Our scan identified over 30,000 exposed hosts.
0
10
16
Hey Hackers! Let’s kick off Friday with a post by Jessé Neto! He explores service account management. Since Windows Server 2012, MSAs/gMSAs automate credential security with complex, auto-rotated passwords. Link:
0
4
10
Hackers! .Passando rapidinho para enviar uma imagem simples de lembrete para não perdermos a talk de nossos analistas na H2HC!!. Vai ser muito foda, contamos com todos!
0
5
21
👹 Novo White Paper: Afinal, o que é Ransomware? Saiba como ele opera e como se proteger! 👹. Entenda como prevenir, conter e recuperar de ataques cibernéticos. 📥 Acesse: #CyberSecurity #Ransomware.
0
2
7
Our new blog post is on air!. 💀 The Dark Side of JWT: Authentication tokens can become major vulnerabilities!. 🔗 Read now: #CyberSecurity #JWT #RedTeam #Pentest.
0
4
9
Hackers! . Estaremos com duas palestras na BHACK, que acontecerá nos dia 29 e 30 de Novembro!. Carlos Vieira irá abordar o tema "Exploiting Laravel Ecosystem" e Lucas Carmo "Igniting Android Application Assessments". Se nos avistarem, não hesite em nos chamar! ;)
0
1
13
🚨 New blogpost! 🚨. Threat modeling is like brushing your teeth 🪥 - essential to prevent future issues. Learn how this cyclical process protects systems from cyber threats & saves resources. 📖 Read Now: #CyberSecurity #ThreatModeling #DevSecOps
0
1
6
RT @RedTeamVillage_: A huge shoutout to our incredible diamond sponsor, @hakaioffsec, for supporting us at @h2hconference! 🎉💎 We’re beyond….
0
9
0
🚀 We’re sponsoring the Red Team Village at H2HC 2024! . Our culture is all about community and hacking, and we’re reaffirming our commitment by supporting initiatives that strengthen this movement of bits and bytes. See you there! #H2HC #RedTeamVillage #Hacking
0
0
5
Aprenda como é possível utilizar esta documentação para construir maturidade de segurança aplicacional e evitar futuras perdas financeiras ainda na fase de desenvolvimento. Quer saber mais? .Clique no link abaixo e confira todos os detalhes do evento!.
0
0
0
Com um programa de AppSec você pode contribuir para evitar que isso também ocorra com a sua empresa.Os especialistas da Hakai, Oliveira Jr. Allan Kardec e Carlos Vieira explicarão a importância da utilização dos controles proativos durante o desenvolvimento de aplicações.
1
0
0
Recentemente vimos grandes marcas brasileiras sofrendo ataques, perdas financeiras e danos à sua imagem e credibilidade. Desenvolver e manter códigos seguros tem se mostrado um dos maiores desafios das empresas.
1
0
0
Break The Code!. A Hakai Security convida você para um evento imperdível sobre Application Security!. Data: 31/07/2024.Horário: 16:00. "Break the Code" é um evento organizado pela Hakai Security para falar sobre Application Security!. Confira:
2
2
5
The impacts of unrestricted uploads are discussed, with practical examples illustrating the severe consequences for organizations that fail to implement these security controls.
0
0
0
The researcher introduces control measures, including rate limiting, file type validation, and size restrictions, to help reduce these risks.
1
0
0
The research highlights the issues that arise when allowing file uploads in web applications, such as storage overload, remote code execution (RCE), cross-site scripting (XSS) attacks, and phishing pages.
1
0
0
We are pleased to announce the new research published on our blog by our researcher and AppSec Analyst, Thiago Bispo. This study addresses the risks associated with unrestricted file uploads and provides strategies to mitigate them.
1
0
0
New Research: Avoiding Unrestricted File Upload - Straight to the Source. 📄 Read the full research: #CyberSecurity #TechInnovation #Infosec #WebSecurity #FileUpload #HackingResearch #RCE #XSS #Phishing #HakaiSecurity
1
0
0