Tevora Threat Blog

Practice Makes Perfect: Testing Critical Applications with Adversary Simulation

computer-developer-working-with-computers-at-night-2021-08-26-22-39-57-utc-scaled

Adversary Simulation with Voice Cloning in Real Time, Part 1

Adversary Simulation with Voice Cloning in Real Time, Part 2

diverse-computer-hacking-shoot-2022-12-16-01-28-31-utc-scaled

Certified Pre-Owned ADCS and PetitPotam: Executing the Full Attack Chain with Windows and Linux

Malicious Cryptomining & Other Shifting Threats

Watch Video

Filter By

Practice Makes Perfect: Testing Critical Applications with Adversary Simulation

Targeting MSOL Accounts to Compromise Internal Networks

Adversary Simulation with Voice Cloning in Real Time, Part 1

Adversary Simulation with Voice Cloning in Real Time, Part 2

SQLmap; Customizing tools to get the job done

Often we run into a false-positive SQLi (SQL injection) using SQLmap. Even then, our team will attempt to dig deeper and sometimes we hit roadblocks. By working on client’s project and faced the exact challenge. After careful enumeration and testing, an entry point was found that was vulnerable to SQLi.

Implementing Dynamic Invocation in C#

Introduction to payload development, following up on concepts in basic C# payload development.

Certified Pre-Owned ADCS and PetitPotam: Executing the Full Attack Chain with Windows and Linux

This blog provides a tutorial on executing a full attack chain from both Linux and Windows machines of Will Schroeders AD Certificate Services research

Malicious Cryptomining & Other Shifting Threats

Tevora Talks dForce $25 Million Crypto Hack, Blockchain, Blackmarket and security with Kevin Soltani

Watch Video