https://foxglovesecurity.com Tue, 21 Nov 2017 17:38:12 +0000 en hourly 1 http://wordpress.com/ https://secure.gravatar.com/blavatar/573cb6ebffc8823f8e784b0e052d36cf5585c04a495c953a6903f1c4a6669a5b?s=96&d=https%3A%2F%2Fs0.wp.com%2Fi%2Fbuttonw-com.png https://foxglovesecurity.com https://foxglovesecurity.com/2017/11/20/a-sheep-in-wolfs-clothing-finding-rce-in-hps-printer-fleet/ Mon, 20 Nov 2017 19:25:35 +0000 http://foxglovesecurity.com/?p=1707 Continue reading A Sheep in Wolf’s Clothing – Finding RCE in HP’s Printer Fleet]]> br33nmachine fud pret_example dir_listing customer_traversal hp-pret-job job-manipulation.png 20170830_112920 reset.png drive unencrypted_drive windows-ls core-bin nkbin-grep nkbin_extract core-bin-empty core-partition fdisk dd carve netdlls solution_binwalk bdl_zip_w_crc32 bdl_w_crc32.png error1 printdebug1 firmware_sig fim_sig_fail fim_cs bdl_sig_fail sigcheck validatepesig debugger_pause foo_txt inserted_bytes hpwn_offsets.png hpwn_modified validsig thinprint_decompile malware dobadstuff VS_project solution_installer command_to_run simplehttpserver cmd_confirm-e1511204808284 print9100 https://foxglovesecurity.com/2017/08/25/abusing-token-privileges-for-windows-local-privilege-escalation/ Fri, 25 Aug 2017 16:33:02 +0000 http://foxglovesecurity.com/?p=1641 Continue reading Abusing Token Privileges For Windows Local Privilege Escalation]]> br33nmachine https://foxglovesecurity.com/2017/02/07/type-juggling-and-php-object-injection-and-sqli-oh-my/ Tue, 07 Feb 2017 14:17:39 +0000 http://foxglovesecurity.com/?p=1603 Continue reading Type Juggling and PHP Object Injection, and SQLi, Oh My!]]> Justin https://foxglovesecurity.com/2016/10/14/hacking-jasperreports-the-hidden-shell-feature/ Fri, 14 Oct 2016 15:04:18 +0000 http://foxglovesecurity.com/?p=1457 Continue reading Hacking JasperReports – The Hidden Shell Feature]]> br33nmachine login authd.png resource.png resources2 resourcesadded listener.png shell https://foxglovesecurity.com/2016/09/26/rotten-potato-privilege-escalation-from-service-accounts-to-system/ Mon, 26 Sep 2016 19:45:26 +0000 http://foxglovesecurity.com/?p=1282 Continue reading Rotten Potato – Privilege Escalation from Service Accounts to SYSTEM]]> br33nmachine singe wireshark potato-auth wireshark-ntlm ntlm1 ntlm2 token https://foxglovesecurity.com/2016/06/13/finding-pearls-fuzzing-clamav/ Mon, 13 Jun 2016 18:15:28 +0000 http://foxglovesecurity.com/?p=775 Continue reading Finding pearls; fuzzing ClamAV]]> bperryntt https://foxglovesecurity.com/2016/05/10/why-dos-isnt-compromise-5-years-of-real-penetration-test-data-to-stand-behind/ Tue, 10 May 2016 15:44:36 +0000 http://foxglovesecurity.com/?p=904 Continue reading Why DoS isn’t compromise – 5 Years of Real Penetration Test Data to Stand Behind]]> Justin https://foxglovesecurity.com/2016/03/15/fuzzing-workflows-a-fuzz-job-from-start-to-finish/ Tue, 15 Mar 2016 15:00:25 +0000 http://foxglovesecurity.com/?p=728 Continue reading Fuzzing workflows; a fuzz job from start to finish]]> bperryntt https://foxglovesecurity.com/2016/02/24/when-whales-fly-building-a-wireless-pentest-environment-using-docker/ Wed, 24 Feb 2016 14:32:42 +0000 http://foxglovesecurity.com/?p=257 Continue reading When Whales Fly – Building a Wireless Pentest Environment using Docker]]> awhitehatter Selection_075 Screenshot_2016-02-12-16-29-41 Screenshot_2016-02-12-16-11-40 Screenshot_2016-02-12-16-13-18.png Screenshot_2016-02-14-17-57-35 https://foxglovesecurity.com/2016/01/16/hot-potato/ Sat, 16 Jan 2016 19:02:37 +0000 http://foxglovesecurity.com/?p=197 Continue reading Hot Potato – Windows Privilege Escalation]]> br33nmachine Low privilege user spoofing Domain Admin spoofed