Skip to navigation Skip to main content Skip to footer

Search

Total results: 2293

Page 1 of 92

Filters

Services

Topics

Sectors

Heartbleed OpenSSL vulnerability

Research Vulnerability Threat Intelligence Previous current event – v1.8 of post This was a current event and as such the blog post was subject to change over the course of a couple of days as we performed further supplementary research and analysis. 1.8: Update to include Bro detection and further…

Vulnerability Threat Intelligence Research

IODIDE

Research Cyber Security Public tools IODIDE – The IOS Debugger and Integrated Disassembler Environment Released as open source by NCC Group Plc Developed by Andy Davis, andy dot davis at nccgroup dot com To download visit: https://github.com/nccgroup/IODIDE Released under AGPL see LICENSE for more i…

Cyber Security Public tools Research

Internet of Things Security

Research Hardware & Embedded Systems Whitepapers Abstract The Internet of Things (IoT) is an emerging phenomenon where different kinds of devices that were previously not networked are being connected to networks. Examples include network connected thermostats, light bulbs, and door locks. These new…

Hardware & Embedded Systems Whitepapers Research

Heartbleed (CVE-2014

Research Research Technical advisories iSec Partners This research was originally performed by researchers from iSec Partners (now NCC Group), and has been migrated to research.nccgroup.com for posterity. Heartbleed (CVE-2014-0160) Advisory 10 Apr 2014 – Andy Grant, Justin Engler, Aaron Grattafiori…

Research Technical advisories iSec Partners Research

Introduction to Anti

Research Research Tool Release Cyber as a Science tl;dr Anti-Fuzzing is a set of concepts and techniques that are designed to slowdown and frustrate threat actors looking to fuzz test software products by deliberately misbehaving, misdirecting, misinforming and otherwise hindering their efforts. The…

Research Tool Release Cyber as a Science Research

Introducing Azucar

Research Research Cloud Security Tool Release Conducting a thorough Azure security build review or Azure security assessment can be difficult. Clicking through the Azure Ibiza [1] portal to review the details on many of its services, including, but not limited to, Azure Active Directory (Azure AD),…

Research Cloud Security Tool Release Research

Inter

Research Cyber Security Whitepapers Inter-Protocol exploration is an attack vector which encapsulates malicious data within a particular protocol in such a way that the resultant data stream is capable of exploiting a different application which uses a different protocol entirely. This paper will ex…

Cyber Security Whitepapers Research

Introducing idb

Research Whitepapers Authored by Daniel A. Mayer ShmooCon 2014, January 17-19th Washington, D.C. Download whitepaper NCC Group Publication Archive

Whitepapers Research

Introspy for Android

Research Public tools Introspy for Android is a tool designed to help penetration testers understand what an Android application does at runtime, and to greatly facilitate the process of reviewing the application’s security mechanisms. Further details can be found here NCC Group Publication Archive

Public tools Research

Java RMI Registry.bind() Unvalidated Deserialization

Research Cyber Security Technical advisories Title                             Java RMI Registry.bind() Unvalidated Deserialization Reference                   VT-87 Discoverer                  Nick Bloor (@NickstaDB) Vendor                        Oracle Vendor Reference     S0818584 Systems Affecte…

Cyber Security Technical advisories Research

Interfaces.d to RCE

Research Research Vulnerability North American Research Several months ago, I was having a poke at the Mozilla WebThings IoT gateway. The gateway essentially allows a user to host their own IoT cloud from a device (such as a Raspberry Pi) on their local network. It creates a tunnel to a personal sub…

Research Vulnerability North American Research Research

Inter

Research Cyber Security Whitepapers Research into web browser security has acted as a catalyst for more depth research into Inter-Protocol Communication, an attack vector that potentially allows arbitrary protocols to meaningful interact with each other. In the past, it has been assumed that communi…

Cyber Security Whitepapers Research

Introducing Chuckle and the Importance of SMB Signing

Research Tool Release Service Message Block (SMB) is a protocol used for accessing shared resources; most corporate Windows networks use SMB to access shared folders and printers. Digital signing is a feature of SMB designed to allow a recipient to confirm the authenticity of SMB packets and to prev…

Tool Release Research
;